This notice tells you why Atlas Chiropractic Clinic collects information about you and how this information may be used.
As a patient of Atlas Chiropractic Clinic, we will need to hold personal information about you (name, contact details, medical history etc.) to be able to provide you with the best possible care. Your requesting treatment and our agreement to provide that care constitutes a contract. You can, of course, refuse to provide the information, but if you were to do that we would not be able to provide treatment.
This information is stored as paper records, in lockable filing cabinets. If X-rays or MRI scans are requested these are stored on disc and locked away. Letters and invoices containing your data are stored on password protected electronic devices. This data is held solely for the purpose of providing safe and effective care and is collected lawfully in accordance with the General Data Protection Rules (2018), the Human Rights Act (1998), The Common Law of Confidentiality and The General Chiropractic Council Code of Conduct. Your data is not used for marketing or for any other reason. The Clinic Directors are the data controllers and are responsible for the accuracy and safe-keeping of your information. Please help to keep you records up to date by informing the clinic of any change of circumstances (including change of address, telephone number and change in health status etc.).
All information about you is held securely using a combination of working practices and technology, and appropriate safeguards are in place to prevent accidental loss, or access without consent. No records are kept longer than necessary. As Chiropractors, we abide by the General Chiropractic Council Code of Conduct and therefore have a legal obligation to retain your health records for a minimum of 8 years after your last appointment with us (or until the age of 25 for patients that are under 18 years). After this time your records will be destroyed. Clinic staff will have access to your records to enable them to do their jobs. They have a legal obligation to keep information about you confidential.
From time to time information may be shared with others involved in your care, if it is necessary. Anyone with access to your records is properly trained in confidentiality issues. In almost all circumstances you will be required to give written consent (or in the case of a child, parental consent) before information is released-such as reports for insurance companies, solicitors, GP letters etc. In exceptionally rare cases we may be required by law to release your records (without consent), for example if a court order is presented, or if there is an imminent risk to the life of yourself or others.
*During the Covid-19 Pandemic your contact details may have to be passed on to the NHS track and trace service without your consent. The lawful basis for this would be a legitimate interest, as the government requires this information to protect the public from further viral transmission, harm and risk to life.
To ensure your privacy, we will not disclose information over the telephone, fax, or email unless we are sure we are communicating directly with you. Information will not be disclosed to family and friends unless we have prior written consent and we do not leave messages involving personal data with others.
You have the right, under the General Data Protection Rules (2018) to request access to your records held at the clinic and the right to request rectification of any errors, and there is usually no fee payable. We are required to respond to you within one month. All requests for personal data must be made in writing by the patient or legal guardian to Lucinda Rowe, the Data Controller at the address below. Scanned requests can be emailed to firstname.lastname@example.org or faxed to 01484 767314. All requests must be signed and dated, and we may phone you to confirm the request prior to release of any personal information or ask for photo identification.
Should you have any concerns about how your information is managed at the clinic, please contact the clinic owner, Lucinda Rowe. If you are not satisfied with the response, you have the right to raise the matter with the Information Commissioner’s Office via their website (www.ico.gov.uk).
Copies of our full data protection policy are available on request.
Atlas Chiropractic Clinic Ltd. 2020