Personal details and consent

I need to collect your personal details including information on your health so that I can provide you with the best possible treatment and care. By requesting treatment and me agreeing to treat you constitutes an (unwritten) contract. I have a legitimate interest in collecting this information. You are free to refuse to provide the information requested but without this information I may not have enough data and information to provide the best treatment. I keep records of your contact information so that you can receive confirmation and reminders of your appointments and so that I am able to update you on any matters relating to your care and exercise prescriptions. Case histories and personal data are stored either on paper or electronically in the Cliniko system. When you first register with Cliniko you are asked whether you consent to the privacy policy (which is this document). I have a legal obligation to retain your records for seven years after your last appointment, after which time they will be deleted. If you are prescribed an exercise programme I will sometimes use a system called Rehab Guru which stores your name and email address for the purposes of being able to send you the exercise programme and no other data.  Your clinical records are stored on a cloud-based database that is password protected. Any email communications are stored on a password protected computer and are deleted within twelve months. Your clinical records and emails are only accessible by me, and your information is not shared with anyone who does not have a legal right of access unless consent is obtained and given by you in advance. You have the right to request a copy of all the data that I hold about you and you can ask me to correct any factual errors. I am legally required to respond to any request from a client to see their personal data within 30 days.  In the case that I may need to refer you to another health professional I will ensure that you give prior consent before sharing any personal data. If you have any concerns that I may be mishandling your personal data you have the right to complain. Please raise your concern with me first so that I can address any concerns that you might have. You can also raise concerns directly with the Information Commissioner’s Office (ICO). https://ico.org.uk/