Introduction
At restörr Health we treat your privacy seriously. Our privacy policy outlines and informs you of how we will look after your personal data and information. This privacy notice informs you of how your data will be collected and handled to comply with the new General Data Protection Regulation (GDPR) laws effective since May 25th 2018. By using our service in any capacity; you agree to the collection and use of information in accordance with this policy. We use your information to inform and improve our services to you and ensure you get the best possible care whilst using them.
By providing us with your personal data, you warrant that you are over 16 years of age. Any information provided to us relating to under 16’s must be authorised by a parent/guardian.
This privacy policy may change from time to time in line with legislation or industry developments. We will notify clients or website users of these changes by updating this page; it is your responsibility to check the privacy terms occasionally on this page for any policy changes.
Contact details
Full name of legal entity: restorr Health
Contact no: 07912 614274
Email: [email protected]
Postal address: Unit 7, Barncliffe Mill, Near Bank, Shelley, HD8 8LU.
It is important that the information we hold about you is accurate and up to date. Please let us know at any point your personal information changes by emailing us at [email protected].
Data Controller
restörr Health (referred to as ‘we’, ‘us’ or ‘our’ in this privacy notice) are the data controller and are responsible for your personal data. If you have any questions relating to this privacy policy, including any requests to exercise your legal rights, please contact the privacy manager using the details set out above.
This privacy policy was last updated on 20th June 2021.
Professional bodies we are associated with:
CSP: Chartered Society of Physiotherapy (https://www.csp.org.uk)
HCPS: Health and Care professional Council (https://www.hcpc-uk.org)
Third-party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
What information we collect
Personal data When using our service, it is likely that you will be asked to provide certain personal details that can be used to contact and identify you. The personal information collected can include, but is not limited to; your name, email, postal address, telephone number, GP’s contact details and other personal information relevant to your general health including medical examination results and referral letters.
Communications data including any information that you send to us from making contact through; our website, email, text, social media messaging/posting, our blog, or any other communication that you may send to us. We process this data for the purpose of communicating with you, record keeping and for the establishment or defence of legal claims.
Payment data (e.g credit card details) that you use to make a payment on our online clinical Pilates booking system via Instabook is not received or stored by us. This information is processed securely via the third-party payment processor, Stripe (https://stripe.com/gb/privacy). We may share your personal data with our payment processors but only for the purpose of completing the relevant transaction. Such payment processors are banned from using your personal data, except to provide these necessary payment services to us.
How we use the information
The purpose of collecting your information is to allow your clinician and/or Pilates instructor to ensure they manage your case with the relevant due care related to your health and wellbeing, taking in to consideration your age and your requirements. All your data is treated with the highest standards of security and confidentiality and we will never share or release your personal details with a third party without your prior consent or direct instruction to do so.
Third parties that we may be requested to share your personal information with include:
- Other medical healthcare professionals e.g. GP’s, consultants, podiatrists, radiologists;
- your class instructor/personal trainer;
- your health insurance provider;
- your medical-legal company and solicitor.
How we collect and store your personal data
- We may collect data about you from you directly providing the information to us, for example health screening forms completed on site, in person or sent via email.
- via the Instabook booking system (for Pilates classes).
When you create an account with restörr Health via the instabook booking platform, you are required to provide your name, contact number and email address which are securely stored on the site who are subject to their own privacy policy https://www.tryinstabook.com/privacy-policy. - Physiotherapy clinical notes.
When you attend the clinic for physiotherapy treatment, we will add your name, contact number, date of birth and email address to our private practice software database, Cliniko. By doing so we create a personal account which will remain connected to your medical treatment notes, medical forms and health insurance details where applicable. Please see the Cliniko privacy notice for further information https://www.cliniko.com/policies/privacy/
Security
We are committed to the protection of your personal information and this is vitally important to us. Procedures have been put in place to safeguard the information we collect to ensure the prevention of unauthorised access and disclosure. However, as no form of data transmission is 100% reliable, we cannot guarantee its absolute security. We will always act in accordance with the relevant UK and EU legislation.
We are lawfully required to hold your medical records and treatment notes (electronic or paper based) on file for as long as you use our services and for 7 years thereafter, which is in line with EU regulations for handling medical information. For children, data will be held for 7 years after their 18th birthday. We store this information for our use only.
Patient notes (whether paper based or electronic) are stored securely and can only be accessed by authorised restörr Health physio staff. Client notes obtained electronically are stored securely on our online private practice software which is only accessible to authorised restörr Health physio staff. Paper based patient records are stored within a locked filing cabinet.
All measures have been taken to ensure the security and prevention of your personal data from being accidently lost, used, altered, or accessed without authorisation.
The data Protection commissioner will be notified within 72 hours of becoming aware of a breach of GDPR, unless it is unlikely to result in a risk to your rights and freedoms. You will be notified yourself where a breach is likely to result in a high risk to your rights and freedoms without undue delay.
Marketing communications
We strive to provide you with choices regarding personal data uses, particularly around marketing and advertising.
We may send you marketing communications from us for the following reasons unless you subsequently opt out of receiving such communications:
- if you have purchased something from us;
- provided us with your details when you entered a competition;
- requested information; or
- agreed to receive marketing communications when registering with us.
We will not share your personal details with any third party for their own marketing purpose without your prior consent.
You can ask us or any third parties to stop sending marketing messages at any time by following the opt-out link on any marketing messages sent to you or by contacting us at any time.
Where you opt-out of receiving these marketing messages, this does not apply to personal data provided as a result of other transactions such as purchases and registrations.
Your legal rights
Under the data protection laws, you have the right to request access to your personal details. All information regarding your rights can be found on the following link;
https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of these rights, please email us at [email protected]
We will aim to respond to any specific requests within a month; however, due to the complexity of certain cases this may take longer. In any such case, you will be notified.
Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
We use performance and analytical cookies to track your use of our website. This helps us understand and identify how you use the site, measure performance and provide statistical analysis on how our website is found, viewed and used by visitors. This helps us to develop and improve our website as well as products and/or services in response to what you may need or want.
For third party websites accessed via our website, please review their own cookie policy.
Most web browsers allow some cookie control through their settings. You can find out more information about how to manage and control website cookies by visiting https://ico.org.uk/for-the-public/online/cookies/