What is a Privacy Notice?

Under data protection law you, as a patient of Chiropractic First have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.

Who We Are

We are Chiropractic First Limited. Peppercorn Walk, Holton Le Clay. DN36 5DQ
Telephone number: 01472488082
For the purposes of processing your personal data we are the Controller. Our lawful basis of processing this data is one of contract.

The Personal Data We Process and What We Do with It

We record and use the following categories of personal data which may include:

• Name, Address, Date of Birth, Telephone Number, Email address and Medical history.
• Details of any contact the clinic has had with you, such as appointments, telephone calls relating to treatment etc.
• Notes and reports about your health
• Details about your treatment and care
• Results of investigations such as x-rays, etc. where provided by you.
• Relevant information from other health professionals, relatives or carers.

Sharing Your Personal Data

We only share your personal data with your explicit consent. We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations). Where the law requires information to be passed on you will be informed who your data will be shared with and in some cases asked for explicit consent for this happen when this is required. Where third parties are used by us , we ensure they are compliant with the Data Protection Act 1998 and General Data Protection Regulation 2016

How do we maintain the confidentiality of your records?

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

• Data Protection Act 1998 and General Data Protection Regulation 2016
• Every member of staff who works for Chiropractic First Limited has a legal obligation to keep information about you confidential.

Retaining Your Personal Data

Whilst you are patient with us we will continue to store and use your personal data.  We will retain your personal data for a period no greater than 8 years from the date of your last visit or discharge or for paediatric patients when the patient reaches their 25th birthday (or 26th birthday if aged 17 at time of last visit or discharge).

As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.
You may request a copy of your data at any time. Please make such a request in
writing or by email to Chiropractic First Limited, whose details are shown above.

• Please provide the following information: your name, address, telephone number, date of birth, name of treating Chiropractor and details of the information you require. We will need to verify your identity so we may ask for a copy of your passport, driving license and/or recent utility bill.
• If you believe any of the personal data we hold on you is inaccurate or incomplete please contact us directly and any necessary corrections to your data will be made without undue delay.
• If you believe we should erase your data, please contact Chiropractic First Limited whose details are shown above.
• If you wish us to stop storing or using your data, please contact Chiropractic First Limited whose details are shown above.

Where you have provided explicit consent for us to use your data you have a right to withdraw this consent at any time.

Data Breaches

Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the Data Protection Officer who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.

Should You Wish to Complain

You can contact the ICO via their website: www.ico.org.uk should you wish to make a complaint about the way we are processing your personal data.

Automated Decision Making and Profiling

We do not use any system which uses automated decision making or profiling in respect of your personal data.

Version number: 1