(Why I collect your personal data and what is done with it)
When you supply your personal details to Sharon Waltho Acupuncture they are stored and processed for four reasons (the bits in bold are the relevant terms used in the General Data Protection Regulation – i.e. the law)
I have a legal obligation to retain your records for 7 years after your most recent appointment (or age 25, for minors). After this time your records will be destroyed in a method compliant with GDPR.
Your records are stored:
On paper, in locked filing cabinets at my home. When transported to my clinic, every step will be taken to ensure safe arrival at the clinic.
Your phone number or email address may be used electronically on my personal laptop and mobile phone to contact you in relation to appointments or with information relevant to your care. These are password protected. There is a rolling program for deleting emails and your electronic records.
If you wish to contact me via a Facebook page please be advised this is password protected but for the historic issues with privacy associated with Facebook you may wish to think about what info you send to me.
I will never share your data with anyone who does not need access without your written consent. Only the following people will have routine access to your data:
Your practitioner – Sharon Waltho
You have the right to see what personal data of yours I hold and you can also ask me to correct any factual errors. Provided the legal minimum period has elapsed you may also ask me to erase your records.
I want you to be absolutely confident that I am treating your personal data responsibly and that I am doing everything I can to make sure that the only people who can access that data have a genuine need to do so. Of course, if you feel that I am mishandling your personal data in some way, you have the right to complain. Complaints need to be sent to the “Data Controller. Here are of the details you will need for contact:
Sharon Waltho firstname.lastname@example.org 07941 567053
6 Farm Close, Hilton, Derby, DE65 5JZ
If you are not satisfied with my response, then you have the right to raise the matter with the Information Commissioners Office