BODY AND MOVEMENT - PRIVACY NOTICE
What data do we collect?
Our company collects the following data:
-
Personal identification information (Name, email address, phone number)
-
You may additionally provide personal information about your health.
How do we collect your data?
You directly provide our company with most of the data we collect. We collect and process data when you:
-
When you register online or submit an enquiry for any of our products and services.
-
Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
-
Use or view our website via your browser’s cookies.
Why do we collect your data?
When you supply your personal details to this clinic, they are stored and processed for a number of reasons:
-
We need to collect personal information about your health in order to provide you with the best possible treatment. Your requesting treatment and our agreement to provide that care constitutes a contract. You can, of course, refuse to provide the information, but if you were to do that we would not be able to provide treatment.
-
We have a “Legitimate Interest” in collecting that information, because without it we couldn’t do our job effectively and safely.
-
We also think that it is important that we can contact you in order to confirm your appointments with us or to update you on matters related to your medical care. This again constitutes “Legitimate Interest”, but this time it is your legitimate interest.
How do we store your data?
We have a legal obligation to retain your records for 8 years after your most recent appointment (or age 25, if this is longer), but after this period you can ask us to delete your records if you wish. Otherwise, we will retain your records indefinitely in order that we can provide you with the best possible care should you need to see us at some future date.
Your records are stored electronically, using a specialist medical records service called Cliniko. This provider has given us their assurances that they are fully compliant with the General Data Protection Regulations. Access to this data is password protected.
We will never share your data with anyone who does not need access without your written consent. Only the following people/agencies will have routine access to your data:
• The medical records service who store and process our files
• Your practitioner(s) in order that they can provide you with treatment
• Our reception staff, to organise and coordinate appointments and reminders (they do not have access to your medical history or sensitive personal information)
• Other administrative staff, such as our bookkeeper. Again, administrative staff will not have access to your medical notes, just your essential contact details.
When we process your order, it may send your data to, and also use the resulting information from, credit reference agencies to prevent fraudulent purchases.
Marketing
Provided we have your consent, we may occasionally send you general health information in the form of articles, advice or newsletters. You may withdraw this consent at any time – just let us know by any convenient method.
What are your data protection rights?
-
The right to access - You have the right to request our company for copies of your personal data. We may charge a small for this service.
-
The right to rectification - You have the right to request that our company correct any factual errors or information that you believe is incorrect or incomplete.
-
The right to erasure - Provided the legal minimum period has elapsed, you can also ask us to erase your records and personal data under certain conditions.
-
The right to data portability - You have the right to request that our company transfer the data that we have collected to another organization, or directly to you, under certain conditions.
What are Cookies?
Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our website, we may collect information from you automatically through cookies or similar technology.
For further information, visit allaboutcookies.org
How do we use cookies?
Our company uses cookies in a range of ways to improve your experience on our website, including:
-
Keeping you signed in
-
Understanding how you use our website
What type of cookies do we use?
There are a number of types of cookies, however our website uses:
-
Functionality – Our company uses these cookies so that we can recognize you on our website and remember your previously selected preferences. A mix of first-party and third-party cookies are used.
-
Advertising- Body And Movement uses these cookies to collect information about your browser, device and your IP address. Our company sometimes shares some limited aspects of this data with third parties for advertising purposes. We may also collect data collected through cookies with our advertising partners. This means that when you visit another website, you may be shown advertising based on your browsing patterns on our website.
How to manage cookies
You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser. However in a few cases, some of our web features may not function as a result.
Privacy policies of other websites
The Body And Movement website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.
Changes to our privacy policy
We keep our privacy policy under periodic review and place any updates on this web page.
How to contact us
If you have any questions about our privacy policy, the data we hold about you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.
Contact Details:
E: victoria@bodyandmovement.co.uk
T: 07424853918
A: Unit 4, 166 Gilmore Road The Telephone Exchange, London, SE13 5AE.
We want you to be absolutely confident that we are treating your personal data responsibly, and that we are doing everything we can to make sure that the only people who can access that data have a genuine need to do so.
Of course, if you feel that we are mishandling your personal data in some way, you have the right to complain. Complaints need to be sent to what is referred to in the jargon as the “Data Controller” on the contact details above.
If you are not satisfied with our response, then you have the right to raise the matter with the Information Commissioner’s Office.