Privacy Policy

This privacy policy applies to website at www.thewellnessbarnedinburgh.co.uk (the “Website”).

 

We at The Wellness Barn Edinburgh take your privacy seriously. This policy covers the collection, processing and other use of personal data under the Data Protection Act 1998 (“DPA”) and the General Data Protection Regulations (“GDPR”).Clinic Name: The Wellness Barn Edinburgh (the “Clinic”)

 

Contact Details: 07483 150242
EMAIL US VIA OUR CONTACT FORM or thewellnessbarnedinburgh@gmail.com

Address: The Wellness Barn, 111a Swanston Road, Swanston, Edinburgh, EH10 7DS.

 

Data Controller Contact Details: Ms Man Yuen Luk

 

The Purpose of processing Client DataIn order to give professional treatments, we will need to gather and retain potentially sensitive information about your health. We will only use this information for treatments and associated recommendations concerning aspects of health and wellbeing that are offered to you. We also collect basic contact details and information to allow us to contact you and handle bookings.

 

Lawful Basis for holding and using Client InformationThe lawful basis under which we hold and use your information is: legitimate interests. As we, fully registered professionals, hold special category data (i.e. health related information), the Additional Condition under which we hold and use this information is: to fulfil our role as a health care practitioner bound under the professional confidentiality as defined in the Code of Practice and Ethics.

 

What information we hold and what we do with itIn order to give professional treatments, we will need to ask for and keep up-to-date information about your health. We will only use this for informing treatments and any advice we give as a result of your treatment. The information to be held is:

• Your personal details

• Your contact details

• Medical history and other health-related information taken during your assessment, and on subsequent consultations.

• Treatment details and related notes.

We will also ask for information regarding any activities you undertake, your employment, and any medication you take.
We will also record the findings of a physical examination.
We will NOT share your information with anyone else other than the Clinic, or as required for legal process, without explaining why it is necessary and getting your explicit consent. It may be helpful for your treatment for us to share your information with practitioners working with at the Clinic. This is so that we can work together as a team, but we will only do that with your agreement.

The information to be shared with GP, consultant or Health Insurance company , if referred, would be your basic contact details and any relevant health information that would be relevant to them in order to treat you (If you prefer, you can go through this with them yourself rather than via shared information).How we use this information-We use electronic records that are hosted by a third party (Cliniko)

All information is kept electronically in a file that directly relates to your episode of care.Please see their privacy policy here - https://www.cliniko.com/policies/privacy/

 

We use this information:

• To provide a legal record of any treatment or advice we provide

• To ensure continuity of care

• To contact you in regard to your ongoing treatment including sending exercises by e-mail.

• To contact you if new information or treatments become available that may be of benefit to you.

We may pass information with your permission to other medical professionals who may be involved in your care; this may include GPs, consultants, occupational health departments or other Health and Care Professions.
We may pass information with your permission to your private healthcare cover provider or insurance company, when relevant, if your treatment is part of a private healthcare plan or insurance claim.
We may pass information with your permission to lawyers upon your request, to inform a legal process or claim.
We may use your information for quality feedback purposes.
We may use your information for audit purposes.
We may pass your contact details and details of the time and date of your appointment to NHS Track & Trace during the coronvirus pandemic if requested.
We do not pass on your information for commercial purposes.
We take all reasonable steps to ensure that our information is kept up to date and rectified if necessary. It is also your responsibility to inform us if any personal information changes.

 

How long we retain your information for -The Clinic will process personal data during the duration of any treatment and will continue to store only the personal data needed for eight years after your last treatment to meet any legal obligations. After eight years all personal data will be deleted, unless basic information needs to be retained by us to meet our future obligations to you, such as erasure details. Records concerning minors who have received treatment will be retained until the child has reached the age of 25. This applies if you are pregnant at the time of attendance. Your data will not be transferred outside of the EU without your consent.

 

Protecting Your Personal DataWe are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from you.

 

We will contact you using the contact preferences you give us in relation to:

• Appointment times

• Treatment information or information related to your health

• Special offers and promotions, if subscribed to our mailing list (you may unsubscribe at any time)

 

YOUR RIGHTS:

GDPR gives you the following rights:The right to be informed: To know how your information will be held and used (this notice).The right of access: To see your therapist’s records of your personal information, so you know what is held about you and can verify it.The right to rectification: To tell your therapist to make changes to your personal information if it is incorrect or incomplete.The right to erasure (also called “the right to be forgotten”): For you to request your therapist to erase any specific information they hold about you.
The right to restrict processing of personal data: You have the right to request limits on how your therapist uses your personal information.The right to data portability: under certain circumstances you can request a copy of personal information held electronically so you can reuse it in other systems.The right to object: To be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for certain purposes.
Rights in relation to automated decision-making and profiling.

 

The right to lodge a complaint with the Information Commissioner’s Office:

To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be.Full details of your rights can be found at HERE.If you wish to exercise any of these rights, please use the contact details given above. If you are dissatisfied with the response from the Clinic you can complain to the Information Commissioner’s Office. Their contact details are at: www.ico.org.uk

I have read and understood my rights under GDPR
* This question will be required
Please sign inside the box