Client Privacy Policy
Why I collect your personal data and what I do with it and how it is stored. When you supply your personal details to this Wyrd Thistle they are stored and processed for reasons under regulations n the Data Protection Act 2018, and the General Data Protection Regulation – GDPR
I need to collect personal information about your health in order to be covered by my insurance and also to provide you with the best possible treatment. Your requesting treatment and my agreement to provide that care constitutes a contract. You can, of course, refuse to provide the information, but if you were to do that, I would not be able to provide treatment. I have a “legitimate interest” in collecting this information, because without it I couldn’t do my job effectively and safely. I also believe that it is important that I can contact you in order to confirm your appointments with me or update you on matters related to your care. This again constitutes “legitimate interest”, but this time it is your legitimate interest. I may occasionally send you information in the form of newsletters. or updates to my services. You may withdraw this consent at any time – by either unsubscribing or letting me know in writing.
As part of your on going health care/aftercare with me, and included in the cost of your therapy, your email address may also be shared with Rehab my Patient - a system I use specifically for you in order to provide ongoing care by way of movements / stretches or exercises that I feel will aid you in recovery or homeostasis .
I have a legal obligation to retain your records for 6 years but after this you can ask me to delete your records if you wish. Your records are stored: Electronically (“in the cloud”), using a specialist appointment booking and records service. called Fresha This provider has given me their assurances that they are fully compliant with the General Data Protection Regulations. Their privacy policy is available to view on their system. Access to this data is password protected, and the passwords are changed regularly. there is also a two factor authentication in place. Rehab my Patient also stores some details such as email addresses and telephone numbers - it does not store any other information other than the plans sent to you for aftercare advice.
Receipts can be emailed or sent via text regardless of any payment method - these receipts have my details on them should you require it for healthcare refunds. I will never share your data with anyone who does not need access without your written consent. I am the only one with passwords to your data. If I send out newsletters you can opt out of at any time. I may also send Christmas cards to your home address.
You have the right to see what personal data of yours I hold, and you can also ask me to correct any factual errors. Provided the legal minimum period has elapsed , you can also ask me to delete your records.
If you feel that I am mishandling your personal data in some way, you have the right to complain. Complaints need to be sent to Lizzy Layton-Scott Wyrd Thistle The Shed 49 Forth Street Methil KY8 3PH
If you are not satisfied with my response, then you have the right to raise the matter with the Information Commissioner’s Office.