When you supply your personal details to us at The Backstory UK – Chiropractic and Postural Correction Clinic, we ensure full compliance with the EU General Data Protection Regulation (GDRP).  The purpose of this policy is to inform you, as a user what information we collect about you when you visit the website and how we use that information. 

Under the General Data Protection Regulation (GDPR), your personal details are processed and stored under the lawful bases of:

• Contract: the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract

We need to collect personal information about you, your health and your health history in order to provide the best, safest and most appropriate care for you possible.  When you request and agree to starting care, signing our Informed Consent document constitutes a contract.  You have the right to refuse to provide the information, but if you were to do so, then we would not be able to provide care. 

• Legitimate Interest: the processing is necessary for your legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

We have Legitimate Interest in collecting your information, because without it we would not be able to do our jobs safely and effectively. We have Legitimate Interest as we think it is important to be able to contact you regarding appointment confirmations, and to converse with you regarding matters relating to your health care (this is in both our and your legitimate interest). 

• Consent: the individual has given clear consent for you to process their personal data for a specific purpose.

Only if we have your consent, may we occasionally send you general health information (articles, newsletters or advice). You may withdraw this consent at any time – You can inform us by phone, email or in person.

• Legal obligation: The processing is necessary for you to comply with the law (not including contractual obligations).

We have a legal obligation to store your data for eight years after your most recent appointment with us, or until you are 26 years old – if this is longer.  All hard copies of documents or records are stored securely in the clinic and all web-based records are kept securely on our health record service Pabau.  We are under an obligation to inform the Information Commissioners Office of any data breeches of this data within 72 hours.

We do not share your Personal Data with anyone outside The Backstory UK Chiropractic and Postural Correction Clinic, that doesn’t have a direct link to providing our service to you.  Every member of staff at The Backstory UK Chiropractic and Postural Correction Clinic, are committed to respecting your privacy and confidentiality and has a legal obligation to do so.  We will never share your data with anyone who does not need access without your written consent.  Only the following people/ agencies will have routine access to your data, in order to allow us to provide our service:

• The web-based patient management software Pabau who store our patient files
• Your practitioner(s) in order for them to be able provide you with care.
• Our reception team in order them to organise appointments, reminders, schedules and our practitioner’s diaries
• In the event of a practitioner’s illness or holiday, we may need a practitioner to cover.  This will give them access to your personal data and medical notes, both of which are needed in order to provide you with the ongoing care you require.  The practitioners that are used in these events enter into a contract with The Backstory UK Chiropractic and Postural Correction Clinic, which include confidentially agreements to ensure that your data is treated with the highest level of privacy.

 Other 3rd Parties

• We usr Microsoft Office to coordinate our communication e-mails. This company will only hold your name and email address.

We are under an obligation to inform the Information Commissioners Office of any data breeches of this data within 72 hours.

We have a legal duty to keep your information confidential. However, if there are circumstances where you or someone else might be at risk of significant harm, there may be a legal reason to share information about you.

Your Data Protection Rights – Under data protection law, your rights include:

• Your right of access
• Your right to rectification
• Your right to erasure
• Your right to restriction of processing
• Your right to object to processing
• Your right to data portability

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

CONTACT US

As described in the information above, we want you to be certain that we are doing our absolute best to ensure that your personal data is always delt with correctly.  If you feel that this is not the case in some way, you have the right to complain.  Complaints need to be sent to:

• Cara Joseph
• [email protected]
• Prama House, Level 2, 267 Banbury Road, Oxford, OX2 7HT
• 01865 704984
• www.thebackstory.uk

If you are not satisfied with our response or resolution, you have the right to raise the matter with the Information Commisioners Office.