PRIVACY NOTICE
The website for Lee Freed is www.awoolfsson.co.uk. We’re committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR).
Our privacy policy explains when and why we collect personal information about people who visit our website, how we use that information, the conditions under which we may disclose information to others with your consent and how we keep information secure.
We may change our privacy policy from time to time so please check this page periodically to ensure that you’re happy with any changes. By using our website, you’re agreeing to be bound by this policy.
Any questions regarding this Policy and our privacy practices should be sent via our website contact form to or by post to Awoolfsson Osteopaths Ltd. 647 Kenton Lane, Harrow, Middlesex HA3 6AS. Alternatively, you can telephone 020 8954 9504.
WHO ARE WE?
Lee Freed operates a private practise in Middx, England. He is a qualified Osteopath and is a full member of the General Osteopathic Council.
HOW DO WE COLLECT INFORMATION ABOUT YOU?
We obtain information about you when you use our website contact form, send us an email, call us on the telephone, send us information through the post, fill out a form in our practise or verbally give us information in our practise.
WHAT TYPE OF INFORMATION IS COLLECTED FROM YOU?
The personal information we collect on our website might include your name, address, email address, telephone number and other information that you consent to provide on our website contact form.
| Category of personal data and data subject | Legal basis for processing personal data | Who these personal details are shared with | Time limits for erasure | Organisational/Technical security measures to ensure security level appropriate to risks |
|---|---|---|---|---|
| People who email us to make enquiries | Necessary for the purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject (Note that this condition is not available to processing carried out by public authorities in the performance of their tasks). | Registered health care professionals and those under their supervision including receptionists and administrative assistants staff. | 2 years unless the person emailing makes an appointment for an examination when the data may be transferred to their medical records and data is processed in accordance with patient records above | If paper records of emails are made they are not kept and destroyed by shredding. Electronic data is password protected, employees can only access the information essential for their role and receive appropriate training for their role. All employees have passwords so there is an audit of any changes made, there is also a back-up system that means data can be restored. All anti-virus software and other software are kept up to date. We will monitor any emails sent to us, including file attachments for viruses or malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law. We will report to the relevant authorities any content that is in breach of the law. We use Transport Layer Security (TLS) to encrypt and protect email traffic in line with government. If your email service does not support TLS, you should be aware that any emails we send or receive may not be protected in transit. |
| Patient records – including, referral letters etc. | Legitimate interest and for the purposes of health care | Registered health care professionals and those under their supervision | The NHS specifies 7 years or, in the case of children under 18, until their 25th birthday. Guidance is that it is best practice for records to be kept for 10 years. | Only registered health care staff have access to the complete patient record. All registered staff comply with GOC standards, which ensure they respect patient confidentiality. Paper records are kept securely. Electronic data is password protected, employees can only access the information essential for their role, all employees have passwords so there is an audit of any changes made, there is also a back-up system that means data can be restored. All anti-virus software and other software are kept up to date. |
| People who make a complaint to us | The purposes of legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, rights or freedoms of the data subject (Note that this condition is not available to processing carried out by public authorities in the performance of their tasks) | Senior management and Registered health care professionals and those under their supervision including receptionists and administrative assistants staff as required in order to deal with the complaint | 2 years after the complaint is closed. | Paper records are kept securely. Electronic data is password protected, employees can only access the information essential for their role and receive appropriate training for their role. All employees have passwords so there is an audit of any changes made, there is also a back-up system that means data can be restored. All anti-virus software and other software are kept up to date. |
| Staff records – includes bank details, NI number, and other personal information | Performance of a contract with the data subject or to take steps to enter into a contract and processing is necessary for carrying out obligations as an employer | HR (including payroll) and senior management only HRMC Crest or other pension provider requested by individual staff members | Kept for tax purposes and future claims/information | Paper records are kept securely. Electronic data is password protected, employees can only access the information essential for their role and receive appropriate training for their role. All employees have passwords so there is an audit of any changes made, there is also a back-up system that means data can be restored. All anti-virus software and other software are kept up to date. |
| Customer records – e.g. direct debit/payment details | Legitimate interest | The data subject’s bank | Kept for tax purposes and future claims/information | Paper records are kept securely. Electronic data is password protected, employees can only access the information essential for their role and receive appropriate training for their role. All employees have passwords so there is an audit of any changes made, there is also a back-up system that means data can be restored. All anti-virus software and other software are kept up to date. |
HOW ELSE YOUR INFORMATION MAY BE USED?
We may also use your information to:
- to carry out our obligations arising from any contracts or agreements entered into by you and Awoolfsson Osteopaths Ltd.
- seek your feedback on the services we provide
- notify you of relevant changes to our services
- send you communications which you have requested and that may be of interest to you for legitimate business purposes
- process an employment application
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. Awoolfsson Osteopaths Ltd. will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with Awoolfsson Osteopaths Ltd.
WHO HAS ACCESS TO YOUR INFORMATION?
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
Third Party Service Providers working on our behalf: We may pass your information to our third-party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties beyond the Awoolfsson Osteopaths Ltd. Network for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
YOUR CHOICES:
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about Awoolfsson Osteopaths Ltd. services, then you can select your choices by ticking the relevant boxes on our website contact form on which we collect your information.
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us via our website contact form or by writing to us at Awoolfsson Osteopaths Ltd. 647 Kenton Lane, Harrow, Middlesex HA3 6AS. Alternatively, you can telephone 020 8954 9504.
YOUR RIGHTS:
Under the General Data Protection Regulation (GDPR), you have rights as an individual which you can exercise in relation to the information we hold about you.
- The right to be informed
This encompasses our obligation to provide ‘fair processing information’, typically through a privacy notice that emphasises the transparency in our data processing methods and the reasons we may process your personal data with your consent. - The right of access
This allows individuals to be aware of and verify the lawfulness of the processing. - The right to rectification
This gives individuals the right to have personal data rectified if it is inaccurate or incomplete. - The right to erasure
Also known as ‘the right to be forgotten’ this enables an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing. - The right to restrict processing
This provides individuals with the right to ‘block’ or suppress processing of personal data. - The right to data portability
This permits individuals to obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without limiting usability. - The right to object
Individuals have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics.
You can read more about these rights at https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/.
HOW YOU CAN ACCESS AND UPDATE YOUR INFORMATION?
Awoolfsson Osteopaths Ltd. tries to be as open as he can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the General Data Protection Regulation (GDPR). If we do hold information about you, we will:
- give you a description of it;
- tell you why we are holding it;
- tell you who it could be disclosed to; and
- let you have a copy of the information in an intelligible form.
To make a request to Awoolfsson Osteopaths Ltd. for any personal information we may hold, you need to put the request in writing addressing it to the address provided below.
We will try to deal with your request informally, for example by providing you with the specific information you need over the telephone if appropriate.
The accuracy of your information is important to us. If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting us via our website contact form or write to us at Awoolfsson Osteopaths Ltd. 647 Kenton Lane, Harrow, Middlesex HA3 6AS. Alternatively, you can telephone 020 8954 9504.
You also have the right to ask for a copy of the information Awoolfsson Osteopaths Ltd. holds about you. Please notify us via our website contact form or write to us at 647 Kenton Lane, Harrow, Middlesex HA3 6AS. Alternatively, you can telephone 020 8954 9504.
SECURITY PRECAUTIONS IN PLACE TO PROTECT THE LOSS, MISUSE OR ALTERATION OF YOUR INFORMATION
When you give us personal information, we take steps to ensure that it’s treated securely. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we take great care to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
USE OF COOKIES
Like many other websites, the Awoolfsson Osteopath’s Ltd. website may use cookies. ‘Cookies’ are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. While cookies collect statistical data about your browsing actions and patterns, they do not identify you as an individual. This helps us to improve our website and deliver a better more personalised web user experience.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy. Turning cookies may result in a loss of functionality when using our website.
For more information about how we use Cookies, click here.
LINKS TO OTHER WEBSITES
Our website may contain links to other websites run by other organisations. This privacy policy applies only to the Awoolfsson Osteopaths Ltd. website‚ so we encourage you to read the privacy statements on the other websites you visit. Awoolfsson Osteopath’s Ltd. cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
In addition, if you linked to our website from a third-party website, Awoolfsson Osteopaths Ltd. cannot be held responsible for the privacy policies and practices of the owners and operators of that third-party site and recommend that you check the privacy policy of that third-party site.
16 OR UNDER?
Awoolfsson Osteopaths Ltd. is dedicated to protecting the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
TRANSFERRING YOUR INFORMATION OUTSIDE OF EUROPE
As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy. Currently, our servers are located within the European Union and the United States (covered under the EU-U.S Privacy Shield Framework).
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
HOW TO CONTACT AWOOLFSSON OSTEOPATHS LTD.
Our address: 647 Kenton Lane, Harrow, Middlesex HA3 6AS
Telephone: 020 8954 9504
Review of these policies: the Awoolfsson Osteopaths Ltd. website keeps this Privacy Notice under regular review.
This Policy was last updated in June 2020.