We respect your privacy and understand that privacy is important to you and that you care about how information about you is used, so this privacy notice sets out details about what data we collect and how we use it.
Where we collect personal data via our website, we will be upfront about it and it will be obvious to you that you’re providing personal data and how we will be using it.
When someone visits our website (andoverpodiatryclinic.co.uk) we make use of the Google Analytics service to collect standard information about visitors to the sites and their behaviour (e.g. what pages they viewed). The data provided by Google Analytics is anonymised and in no way enables us to identify individual visitors, however, Google Analytics will place a cookie on your device to enable the service. For more information about how Google Analytics cookies work on websites visit: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
Cookies may also be used for the following reasons:
Our website uses WordPress as the content management system (CMS). WordPress uses a number of cookies for the functionality of the site. Details about what cookies WordPress may place on your device can be found here: https://wordpress.org/support/article/cookies.
If you wish to not allow cookies, most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit allaboutcookies.org
If you fill out one of our website forms a notification email is sent to the relevant team within our company. A copy of the data you submit is therefore stored within our email systems for responding to your enquiry and a copy is kept for backup purposes within the website database. As our site uses SSL (https) the data you submit using the contact form will be encrypted once you press the “Submit” button.
We use a third-party supplier (Clook) to host our website. Whilst generally they would have no need to access our website content or database, it is possible they may from time to time mainly for support queries. We are assured the hosting provider is GDPR compliant.
When you call to book an appointment, the receptionist will take some information. This will be stored in the online notes system and will not be provided to any third parties. The information will only be used to contact you to arrange appointments, or to contact other health care professionals on your behalf. Your permission will always be asked before this happens.
When you contact our reception staff, they will ask you for your name, address, date of birth, GP surgery and maybe some other information. This is so that we can contact you if there are any problems with your upcoming appointment and contact your GP of this were to be necessary (with your permission only).
When the clinic is contacted via email. Your information may be transferred to the online clinic notes system as part of your records. The email will be kept for future reference unless you ask us to remove it.
Patient details are stored on the online notes system and clinical notes are kept by law for a minimum of a set number of years (depending on your specific circumstances). These records will not be shared with any third party and are total confidential.
We collect name, address, bank details and HCPC number of associates. This helps us to ensure that each member of staff has the required qualifications. These data are kept securely.
Recruitment is carried out via email. Any information sent by potential associates will be held on a computer with a secure password and within the emails sent.
We only store the data necessary to provide the services we provide to you. We will keep this data for as long as it is lawful for us to do so.
We use a number of third-party cloud-based services for the purposes of effectively running our business and providing our services to you. We also use a number of third-party organisations, e.g. accountants, HR support, etc.
In all cases where we are using a third-party service or company, we will only provide the minimal amount of information for the purposes of delivering the service to us and to meet our requirements.
We always carry out due diligence against all our third-party suppliers for the purposes of ensuring their compliance with data protection, maintaining adequate security of your data and ensuring they apply adequate data protection principles to the processing of the data we supply.
Under current data protection legislation in the UK, you have rights as an individual which you can exercise in relation to the data we store and process about you. You can find more information about your rights on the Information Commissioner’s website: https://ico.org.uk/for-the-public/
If you want to make a complaint about the way we are processing your data, you can contact us, using the contact details below. You also have the right to complain to the Information Commissioner’s Office: https://ico.org.uk/concerns/
Where we are processing your data and needed to ask your permission to do so, you are able to withdraw your consent at any time. If you wish to stop receiving our marketing emails you can do so, by clicking on the “unsubscribe” link at the bottom or the email. Otherwise, you can contact us, using the contact details below.
If you wish to raise concerns about the way we are processing your data or would like to raise an objection, then please email us via firstname.lastname@example.org with your concerns.
It is important that any of your data that we process is kept up to date. We will from time to time ask you to verify your contact details but if you wish to update any information we hold about you, please contact us using the contact details below.
Under some circumstances you may request us to delete your data from our systems. Where this is possible (e.g. we don’t have any legal purpose for continuing to process your data) we will erase it from our systems.
If you wish to exercise your right to be forgotten, please contact us via the contact details below.
Your right to portability allows you to request a machine-readable format of the data you supplied to us and associated service logs (where we store them). Please contact us, using the contact details below, if you wish to receive a CSV export of your data.
You have the right to ask us about what data we hold about you, how we process it and provide you with a copy of the information, free of charge and within one month of your request.
To make a request for any personal information we hold and process about you, we would prefer it if you could put it in writing or in an email to the addresses below. We will need to verify your identity before providing the information and where necessary may contact you further to ensure we understand what data you are requesting.
We do not share any personal data with any third parties unless it is lawful for us to do so, if required by law to do so or if you provide us with permission to do so.
For more information about your data rights and privacy or data protection in general visit the Information Commissioner’s Office website: https://ico.org.uk
If you have any questions about how we collect and use your information not covered in this privacy notice, or if you wish to speak to someone about our approach to data protection and privacy, please contact:
We may change or update elements of this privacy notice from time to time or as required by law. The most current version of our privacy notice is available on our website at andoverpoditryclinic.co.uk