Data Protection at Valle Ruiz Osteopathy

Under EU wide general data protection regulation (GDPR) you, as a patient, have specific rights. To communicate these rights to you in a clear and concise manner, I am providing you with this notice. To be able to document and process your personal data, under GDPR you must give me explicit consent.

Personal Data

I have a legal contractual obligation to collect personal data for the purposes of care and require detailed medical information. I will only collect what is relevant and necessary for your care. This data is always held securely and is not shared with anyone. Only your contact details will be shared with receptionist (J. Dodd) for the sole purpose of managing your appointments.

I have acquired this Osteopathic Practice from Leonard S. Armfield. If you are a prior patient of Len he has given me consent to access his treatment records. I will also require you consent to consult your prior treatment records.

My website uses wix.com and I have opted for the no use of cookies.

Retaining your personal data

I will process personal data during the duration of any treatment and will continue to store only the personal data needed for eight years after the contract has expired to meet any legal obligations. After eight years all personal data will be kept or deleted if requested. Deleted. Records concerning minors who have received treatment will be retained until the child has reached the age of 25.

Your rights

At any point whilst in possession of, or processing your personal data, all data subjects have the following rights:

Right of access - you have the right to request a copy of the information we hold about you - you can make a subject access request and you will need to provide identification. There is no charge for this.
Right of rectification - you have the right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten - in certain circumstances you can ask for the data held about you to be erased from our records
Right of restriction of processing- where certain conditions apply you have the right to restrict the processing.
Right of portability - you have the right to have the data we hold about you transferred to another organisation.
Right to object - you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling

Data breaches

Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. The breach will be dealt with by Valle Ruiz who will explain to you the nature of the breach and the steps we are taking to deal with it.

Complaints

In the event that you wish to make a complaint about how your personal data is being processed by Valle Ruiz Osteopathy you have the right to complain to me. If you do not get a response within 30 days, you can complain to the ICO.