Privacy Policy For Move Health and Chiropractic

What is a Privacy Notice?

Under the General Data Protection Regulation (GDPR) and the UK Data Protection Act, we are required to inform you about how we collect, use, store, and protect your data, as well as your rights concerning it. This privacy notice outlines how Move Health and Chiropractic collects, processes, and safeguards your personal information, including that of your child if applicable.

Who Are We?

We are Move Health and Chiropractic, the Controller for your personal data, responsible for its secure and lawful processing.

Contact Information: 

Move Health and Chiropractic
10 Cedar Drive, Thornton, Middlesbrough, TS8 9BY
07946324080
rachel@movehealthandchiropractic.co.uk

What Personal Data Do We Process and Why?

When you book your first appointment, we collect the following information:

• Personal Details: Name, address, date of birth, phone number, and email address.
• Health Information: Details shared during your health history discussion, examination, and subsequent treatments, including any imaging, scans, or letters received or written.

We use this information to:

1. Book Your Appointments: We record your details in our diary and practice management systems.
2. Deliver Treatment: Your health records enable us to provide safe, effective care tailored to your needs.
3. Audit Quality: We may anonymise your data for internal audits to improve service quality.

For children under 16, consent must be provided by a parent or guardian, and no questionnaires or surveys are sent unless the child is over 11 and consents.

How Do We Maintain Your Confidentiality?

We are committed to protecting your privacy and adhere to the following legal and professional standards:

• GDPR 2018
• Human Rights Act 1998
• Common Law Duty of Confidentiality
• General Chiropractic Council Code of Conduct

Access to your data is strictly limited to authorized personnel. All employees and practitioners at Move Health and Chiropractic are legally obligated to maintain confidentiality.

Sharing Your Personal Data

We only share your data with your explicit consent unless required by law or in emergencies (e.g., life-or-death situations). If necessary, information shared with other healthcare providers (e.g., referral letters) will include only relevant details, and you will receive a copy of the correspondence.

With your consent, we may use third-party systems, such as [replace with any other tools/services you use], to manage questionnaires, exercise programs, or other elements of your care. These providers comply with GDPR and do not store data outside the UK or EU.

We retain your records in line with professional and legal requirements:

• Adults: Records are kept for 8 years after your last treatment.
• Children: Records are retained until the child’s 26th birthday.

After these periods, records are securely destroyed.

Your Rights

As a data subject, you have the following rights:

• Right of Access: You can request a copy of your personal data at any time. Requests should be made in writing or via email. We will provide the information within 30 days, free of charge, upon verifying your identity (photo ID required).
• Right of Rectification: If your data is inaccurate or incomplete, we will correct it promptly.
• Right to Erasure: You may request the deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: You can request limitations on how we process your data in certain circumstances.
• Right to Withdraw Consent: Where you have provided explicit consent for us to process your data, you can withdraw it at any time.

To exercise these rights, please contact us using the details above.

Data Breaches

In the event of a data breach that poses a high risk to your rights and freedoms, we will inform you immediately. We will explain the nature of the breach, its potential impact, and the measures being taken to resolve it.

If you have concerns about how we handle your data, please contact the clinic owner, Rachel Dove. Alternatively, you can contact the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Automated Decision Making and Profiling

We do not use any automated systems for decision-making or profiling in relation to your personal data.

If you have any questions about this privacy notice or how we process your data, please don’t hesitate to get in touch.