Data Controller: Jenny Johnson
Introduction and General Terms:
Information about you and your health is recorded when you receive Physiotherapy to help with your care and treatment. This is what most people call your medical records.
- Your name, date of birth, address and contact details.
- Details of health conditions, illnesses, medicines and other treatments.
- Records of contact you’ve had with doctors / consultants / radiologists and other health care workers.
Good care requires good information about you, so it’s very important that this information is recorded. But it’s also very personal – so you need to be confident that it’s looked after securely and in line with the law.
Why we collect some information from your health and care records
We don’t hold your full health and care records. Each health and care organisation you have contact with holds its own records on you. We collect and store your medical information related to the Physiotherapy treatment you have received.
Why do we hold onto your medical records?
Some of your health information will be held in paper notes in a locked filing cabinet and on a password protected laptop, to improve your care.
Jenny Johnson Physiotherapy will notify you promptly in the event of any breach of your personal data which might expose you to risk.
Use of information that could identify you
We only share information that could identify you when we communicate with your Insurance company / GP / consultant / radiologist / and allied health professionals who are involved in your care. We send that information securely (password protected) and gain consent by you prior to sending this.
Medical Notes Request
If you need access to your medical notes for medico-legal reasons or to change practitioners we are happy to supply them. You will need to pass security questions to verify identity and they will only be sent to you not to a third party due to the documents holding medical information. This will be processed within 30 days of making your request.
Jenny Johnson Physiotherapy will not treat anyone under the age of 13 (“Children”) without written consent from a guardian. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child under the age of 13 without verification of parental consent, we will take steps to remove that information from our data base.
You have rights under GDPR
- To access your personal data
- To be provided with information about how your personal data is processed
- To have your personal data corrected
- To have your personal data erased in certain circumstances
- To object to or restrict how your personal data is processed
- To have your personal data transferred to yourself