In May 2018, the original Data Protection Act 1998 was replaced by General Data Protection Regulation (GDPR). This had an impact on small businesses such as mine to notify users of how we collect and use their personal details. This page outlines how I do this.
What this confidentiality notice covers
The Foot Lady is committed to protecting your personal information. In this notice, references to 'we' or 'us' means The Foot Lady. This notice explains how we collect and use the personal information about you.
The Foot Lady is a mobile Foot Health Clinic providing professional and caring treatments for your feet in your own home.
The Foot Lady operates the website: http://www.foot-lady.co.uk (the "Website").
The Foot Lady gathers certain information about people using the clinic. We collect information in the following ways:
At your first appointment you will be given a health assessment including any medication you take, current treatments under your doctor or hospital, health conditions, diabetes status and more. This will be recorded during the assessment. Also personal information; such as your name, date of birth, contact details, etc. You will be informed how we collect your information, how it is stored and how we use it. All information is recorded on paper. We do not record any medical data in digital form on computers, laptops, tablets, mobile phones, etc.
During subsequent visits, these details may be updated as appropriate in our records.
We only collect additional information by talking to you and asking appropriate questions during your appointments.
We do not collect your personal information from your use of our website or from other website sources.
We do not collect your personal information from other 3rd party sources.
We only use your information for the purposes of running the mobile clinic.
We do not use your information for other 3rd party marketing in any way.
We may use your information for a number of purposes including the following:
We do not store your information on our website in any way. The website is for advertising our business and provide information to website visitors.
We will use the information you give us to:
We do not use your information for marketing purposes.
We do not normally share your information with 3rd parties at all.
However, we may disclose your personal information to law enforcement agencies:
We keep records only for as long as required to operate the business in accordance with legal requirements.
Your personal information will be retained for at minimum of 7 years, as is required by medical law in the UK. 7 years after you last appointment your details will be removed from our records. For any person under the age of 18 when treated, records are kept until their 25 birthday. All records will be safely destroyed as per medical regulation.
We keep names and addresses on a laptop in a secure environment. No medical or other person information is kept in digital format. We only keep medical records and personal details in paper format, which is kept in a secure filing system.
We do not keep your personal data in digital format on our website, in a database, on personal computers, laptops, tablets, mobile phones or similar, with the exception of names and addresses as stated above.
The Foot Lady will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Notice.
You have the right to:
We may update the terms of this privacy notice at any time.
We will notify you about significant changes in the way we treat personal information by sending a notice to the primary email address you have provided to us or by placing a prominent notice on our Website.
Donna is the first point of contact regarding any enquires arising from this Privacy Notice. Where possible, please raise all enquires in writing.
If you are unhappy with our work or something that we have done or failed to do in regard of protecting your personal data, please inform us in writing. The Foot Lady will acknowledge receipt of all complaints and will endeavour to investigate the complaint within 15 working days.
All information enquires or complaints should be sent in writing to:
You may also complain directly to the Information Commissioner’s Office (ico) if you are concerned with how we are handling your personal information by using their online form which can be found here: https://ico.org.uk/concerns/handling/.
We may change this Privacy Notice from time to time. If we make any significant changes in the way we treat your personal information we will contact you directly.