Poole Health and Wellbeing Centre Privacy Notice

To provide the best quality service to our clients we need to hold personal information for all our clients.

What data to we collect?

Our company collects the following data:

• Personal identification – name, address, phone number, email address
• GP name and address
• Emergency Contact
• Medical Information
• Payment Information
• Client treatment notes and records
• This can include sensitive information such as health records.

How do we will collect your data?

You directly provide our company with most of the data we collect. We collect and process data when you:

• Complete our new client questionnaire – either on paper or online via formsbyair (formsbyair do not hold any data)
• Telephone or email us
• During treatment sessions
• Register online or place an order for any of our products or services
• Voluntarily compete a customer survey

How will we use your data?

Our company collects your data so that we can:

• Book your appointments for our services
• Provide our health and wellbeing services to you – we use your date to ensure our services are suitable for you and to individualise the service provided to you.
• Process your order
• Email you with booking confirmations and appointment reminders
• Text you with appointment reminders
• Contact you by telephone, text or email about the services we provide you.
• Send you occasional emails with special offers and news

How do we store your data?

Our company securely stores your data on an electronic practice management system – Cliniko, which is fully password protected and GDPR Compliant.

Information Sharing and Disclosure

Keeping the information about our clients safe, secure and confidential is very important to our Company. We will only share your personal information for very limited reasons and in limited circumstances:

• Medical professionals – with your consent, in some circumstances, we will share information with medical professionals such as your GP or consultant to allow continuity of care.

Data Retention

As a health and wellbeing company we are required to keep medical information related to your episode of care for several years. This information helps us do our job to the best of our ability and without it providing a service to you may not be possible.
We are also required to retain your records to comply with legal and regulatory requirements.

Transfer of personal Information out of the EU

Our practice management system, Cliniko is based in Australia, where it stores our data. It also stores our data in USA, UK & EU. As a result, we may transfer your personal data to a jurisdiction with different data protection and government surveillance laws. We have a Data Processing Addendum (DPA) in place with Cliniko, The DPA includes Standard Contractual Clauses (also known as “Model Clauses”). These are an approved set of provisions which offer sufficient safeguards and protection for data that’s processed outside of the EU/EEA, thus meeting the requirements of GDRP.

Marketing

Our company would like to send you information about our products and services. If you have agreed to receive marketing you can always opt out a later date.

You have the right at any time to stop our company from contacting you for marketing purposes.

What are your data protection rights?

Our company would like to make sure that you are fully aware of your data protection rights. Every client is entitled to the following:

The right to access – You have a right to request Our Company for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that Our Company correct any information you believe is inaccurate. You also have the right to request Our Company to complete information you believe is incomplete.

The right to erasure – You have the right to request that Our Company erase your personal data, under certain conditions.

The right to restrict processing – You have the right to object to Our Company’s processing of personal data under certain conditions.

The right to data portability – You have the right to request that our company transfer the data that we have collected to another organisation, or directly to you under certain conditions.

If you make a request we have a month to respond to you. If you would like to exercise any of these rights, please contact us:

Email at: info@poolehwbcentre.co.uk
Call us on: 07795 906158
Or Write to us at: Poole Health and Wellbeing Centre, 630 Ashley Road, Poole, BH14 0AW

Changes to our privacy policy

Our company keeps its privacy policy under regular review and places any updates on this webpage. This privacy policy was written on April 2020.

How to contact us

If you have any questions about our Company ‘s privacy policy, the data we hold on you, or you would like to exercise one of you data protection rights, please do not hesitate to contact the data controller:

Email us at: info@poolehwbcentre.co.uk
Call us on: 07795 906158
Or Write to us at: Poole Health and Wellbeing Centre, 630 Ashley Road, Poole, BH14 0AW

How to contact the appropriate authority

Should you wish to report a complaint or if you feel that our Company has not addressed your concern in a satisfactory manner, you may contact the Information Commissioners Office:

Write to: Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow Cheshire
England
SK9 5AF

Telephone: 0303 123 1113