Krisha Baker Chiropractic Privacy Notice

This privacy notice tells you why Krisha Baker Chiropractor collects information from you or about you (or your child if they are the patient), and what this information may be used for. Data is collected in accordance with the General Data Protection Rules (GDPR) 2018 and the GCC (General Chiropractic Council) code of practice. Under GDPR 2018, you have a right of access to the information held, the right to request any amendments to the data held, the right of erasure (once this no longer conflicts with my legal professional requirement to hold your details for 8 years from your last appointment or from the 18th birthday in the case of a child (whichever is the longer) and the right to restrict the way in which your information is processed. After this time your records will be securely disposed of.

Your personal data

Krisha Baker may collect and store your personal data confidentially and securely for the following reasons:

1. Prior to your first treatment I will need to collect personal information about your lifestyle and medical history in order to ensure that chiropractic is a safe and appropriate treatment for you / your child, or to signpost you to another practitioner should chiropractic not be appropriate. This need constitutes my “Legitimate Interest” in collecting your data. Your requesting treatment and my agreement to provide that care constitutes a contract. Without this information I would not be able to provide treatment.

2. Your contact information, which may include your name, telephone number, email address and postal address is collected in order that I may confirm appointments with you, forward additional educational material in connection with your treatment plan and keep you updated on changes to clinic information and procedures / policies.

3. Your information may be shared with third parties who have been checked for their GDPR compliance in order to refer for medical imaging (with your consent) or for the purposes of an electronic diary system to record your appointment information and to send confirmation emails and reminder texts. You can withdraw your consent to this at any time. Please accompany your request with details of a full name, telephone number and current email address to facilitate the process.

I will never sell any data, or share any personal information, without your knowledge and consent e.g.to your GP/insurance company, or other healthcare professionals. The only exception to this would be if you or your child’s health/life was genuinely considered to be at risk, or if you or your child’s health could put someone else’s life at risk, or if the law requires information to be passed on, and/or in accordance with the Caldicott principles.

4. Any other therapists working from the Cuttle Mill premises may, independently keep their own data about you and any care or treatment they provide to you. It is your responsibility to check their individual data collecting and storage processes.

Data is only shared between chiropractors and therapists with your knowledge and consent.

Data access

Under the General Data Protection Rules 2018, you can request to view or to have made copies of the information we hold about you. Should you determine that this information is not accurate, you have the right to have it amended as soon as is possible.

Requests for copies should be in writing and include your full name, address, date of birth and proof of identity. There will be no charge for these copies.

Data accuracy

To help us keep your records accurate and up to date, it is important that you tell us of any change in contact details, or of any other changes that are relevant as soon as you are able. It is your responsibility to do this.

Data Breaches

Should any of the personal data that we control be lost, stolen or otherwise breached, we will contact you without delay.  We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.