PRIVACY POLICY

Your information and GDPR

The UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), seek to protect and enhance the rights of UK data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and its storage within the UK. 


Endurance Sport injury Clinic based at Bannatyne health club, Shearway Business Park, CT19 5RH, which for the purposes of this privacy notice will be referred to as the Clinic, provides the following information.


Who we are
The Clinic diagnose and treat musculoskeletal conditions. Treatments are carried out in accordance with the British association of sport Rehabilitators and therapists  (BASRaT) https://www.basrat.org The Clinic may also provide other treatments further information available on request. 

This document advises you of our policies and procedures for dealing with your personal and medical information in our clinic.

Why do we collect your Information?
The processing of personal and medical data is necessary so that we can deliver the best quality of physiotherapy care to you, the patient:

  • Your date of birth is used as a unique identifier for your records.

  • Your postal address allows us to post invoices, receipts along with GP and other referrals.

  • Your email address allows us to send you confirmation of bookings, appointment reminders, invoices, receipts or other requested information to you. You may also receive a follow up email  on completion of your treatment asking about service received.

  • Your telephone number allows us to send text reminders of appointments and communicate with you outside of appointment times.

  • We ask you for information regarding your current and past health so that a detailed and accurate Injury assessment may take place and an appropriate rehabilitation plan put into action.

  • We ask you for your occupation, as some occupational factors can contribute to musculoskeletal problems.

  • We ask you to outline your sports and hobbies, as some physical factors can contribute to musculoskeletal problems.

  • We ask for source of referral and where you heard about us to help identify marketing opportunities

Who has access to your information?
All staff members at the clinic have access to paitent records. All staff members are bound by GDPR Legislation.

Your information will not be shared with any personnel outside the clinic unless you have given consent, except when:

  • Requested by law.

  • In your best interests and in n event that you are unable to give consent.

  • In the public interest to prevent serious harm to others.

How is your information stored and protected?
The clinic has implemented measures to safeguard your personal information:

  • We use acuity scheduling to arrange appointments this takes email, phone number and name all formation is stored and protected under GDPR guidelines

  • All paper records are stored in a locked filing cabinet in our main clinic room which is also kept locked when not attended.

  • A paper cash up diary is stored within the locked filing cabinet containing name payment and date

  • All paper notes are destroyed when they are over 7 years old.

  •  patients who attended under the age of 18 years old notes will be kept for 25 years.

  • All staff are trained on how to safeguard our patients’ personal information.

  • In the unlikely event of a data breach, you will be notified immediately as will the Data Protection Commissioner.

  • Your information will in no circumstances be sold to any third parties.

Use of information for training, teaching and quality assurance
It is usual for therapists to discuss patient case histories as part of their continuing professional development (CPD) or for the purpose of training new therapists or students. In these situations, the identity of the patient will remain unanimous.

Your right of access to your health information
You have the right of access to all the personal information held about you by the clinic. If you wish to see your records, in most cases the quickest way is to discuss this with your therapist who will review the information in the record with you. You can make a formal written access request to the practice and receive a copy of your medical records. These will be provided to you within 30 days, without cost.

Your right to amend the information held
Under GDPR legislation, all individuals have the right to have incorrect information that is held about them amended. If this was to arise within the notes held by the clinic, the patient record would be “restricted” i.e. not used until the issue is resolved. However, if the clinic deems the information to be accurate then no amendment will be made.

Your right to restrict the information held
You have the right to have the information we hold restricted;

  • If you contest the accuracy,

  • You need the information to establish, defend or exercise a legal claim,

  • Or you object to the information held.

In this instance, all treatment will be stopped until the issue is resolved. You also have the right to object to the clinic holding your personal information on grounds relating to your particular situation and, as with restriction, all treatments will stop, and the notes will become restricted until the issue is resolved.

In the event that you do not consent to this policy
We require consent from the patient for us to collect and store their personal and medical data, in accordance with this Data Protection Policy. In the event that you do not wish to consent to this policy, we will be unable to provide you with Treatment.

Square space
This site uses Square space as the content management system to run the site. Square space uses cookies which are known as “Functional Cookies”, meaning they are essential to the running of the site but do not collect any personal information.

Embedded content from other websites
This site may include embedded content (Instagram Feed). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Data Breaches
In the unlikely event of a data breach, we will report any unlawful data breach of this website’s database to all relevant persons and authorities within 72 hours of the breach.

If you have any concerns or questions regarding Endurance sport injury clinics privacy policy please get in touch

Policy updated 21/06/2023