Client Privacy Policy

Why I collect your personal data and what I do with it and how it is stored.

When you supply your personal details to this Wyrd Thistle they are stored and processed for reasons under  regulations n the Data Protection Act 2018, and the General Data Protection Regulation – GDPR 

  1. I need to collect personal information about your health in order to be covered by my insurance and also to provide you with the best possible treatment. Your requesting treatment and my agreement to provide that care constitutes a contract.  You can, of course, refuse to provide the information, but if you were to do that, I would not be able to provide treatment. 

  2. I have a “legitimate interest” in collecting this information, because without it I couldn’t do my job effectively and safely.

  3. I also believe that it is important that I can contact you in order to confirm your appointments with me or update you on matters related to your care. This again constitutes “legitimate interest”, but this time it is your legitimate interest.

  4. I may occasionally send you information in the form of newsletters. Or updates to my services. You may withdraw this consent at any time –  by either unsubscribing or letting me know in writing. As part of your on going health care/aftercare with me ,and included in the cost of your therapy, your email address will also be shared with Rehab my Patient -  a system I use specifically for you in order to provide ongoing care by way of movements / stretches or exercises that I feel will aid you in recovery or homeostasis .

I have a legal obligation to retain your records  for 6 years but after this you can ask me to delete your records if you wish. 

Your records are stored:

  • Electronically (“in the cloud”), using a specialist appointment booking and records service. called Cliniko./Fresha This provider has given me their assurances that they are fully compliant with the General Data Protection Regulations. Their privacy policy is available to view on their system. Access to this data is password protected, and the passwords are changed regularly. there is also a two factor authentication in  place. 

  • Rehab my Patient also stores some details such as email addresses and telephone numbers - it does not store any other information other than the plans sent to you for aftercare advice.

  • Your details are also put into my invoicing system which is Square - taken for payment if you choose not to pay by another method, receipts can be emailed or sent via text regardless of any payment method  - these receipts have my details on them should you require it for healthcare refunds.

  • I do not store any paperwork or information on my laptop or computer or phone or iPad - it is all held in the 'cloud' under the systems listed.

I will never share your data with anyone who does not need access without your written consent. I am the only one with passwords to your data. I will send out newsletters via mail chimp which you can opt out of at any time. I may also send Christmas cards to your home address.

You have the right to see what personal data of yours I hold, and you can also ask me to correct any factual errors. Provided the legal minimum period has elapsed , you can also ask me to delete your records. During consultation process provided by Cliniko and video link you are able to see, in real time, your details and how the form is completed, video link is the best way to ensure this however telephone is acceptable and should you wish to see your data at any time I can show you this. In Cliniko once data is saved it cannot be changed by anyone or any system, but can be printed or deleted, for your peace of mind.

If you feel that I am mishandling your personal data in some way, you have the right to complain. Complaints need to be sent to 


Lizzy Layton-Scott

Wyrd Thistle

Levenmouth Community Enterprise Centre

(Brag Enterprises)

Harbour View

Methil

KY8 3RW

If you are not satisfied with my response, then you have the right to raise the matter with the Information Commissioner’s Office.