Privacy Policy
Effective Date: 09/12/2024
David Down Sports Therapy Limited is committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and safeguard your personal data.
1. Data We Collect
We collect and process the following personal data:
- Contact Information:
- First Name
- Last Name
- Contact Number
- Email Address
- Health Information:
- Date of Birth (DOB)
- Medical History and Treatment Notes (required for effective treatment and to comply with healthcare regulations).
- Payment Information:
- Card payment details processed securely via SumUp. (We do not store payment card information ourselves; all transactions are handled by SumUp in accordance with their privacy policy).
2. How We Use Your Data
We use your personal data for the following purposes:
- Contact Number:
- To get in touch with you if necessary (e.g., to confirm or amend appointments).
- Email Address:
- To send booking confirmations, reminders, and occasional updates.
- Health Information:
- To ensure safe and effective treatment tailored to your needs.
- Rehabilitation Programs:
- To create tailored rehabilitation programs using Rehab My Patient, which is linked to our Cliniko system.
- Payment Information:
- To process payments securely using SumUp.
3. Data Storage and Security
Your data is stored securely using:
- Cliniko: A GDPR-compliant platform for managing bookings, storing medical records, and client contact information.
- Rehab My Patient: A secure platform for managing rehabilitation programs, storing names, contact numbers, emails, and DOBs, which integrates with Cliniko.
- SumUp: A secure payment processing service that adheres to industry standards for data protection.
We take all reasonable measures to protect your data, including encryption, secure password management, and limiting access to authorized personnel only.
4. Third-Party Services
We only share your data with third-party providers (e.g., Cliniko, Rehab My Patient, SumUp) to facilitate the services we provide. These providers are GDPR-compliant and committed to safeguarding your data.
5. Your Rights
Under GDPR, you have the right to:
- Access your personal data.
- Rectify any inaccuracies.
- Request the deletion of your data, where applicable.
- Restrict or object to data processing.
- Data portability.
To exercise these rights, please contact us at info@miltonkeynessportstherapy.co.uk.
6. Retention of Data
We retain personal data for as long as necessary to provide our services and meet legal obligations. Medical records are kept for 7 years, in line with healthcare regulations.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified via email.
8. Contact Us
For any questions regarding this Privacy Policy or to exercise your rights, please contact:
- David Down Sports Therapy Limited
- Email: info@miltonkeynessportstherapy.co.uk
- Phone: 01908 151874