Your Information and GDPR:
“Doreen Dempsey Physiotherapy clinic” collects information relating to patients’ health and personal details. This information is classed as sensitive data and termed as special category data. Under the new General Data Protection Regulation, (GDPR), patients of Doreen Dempsey physiotherapy clinic have a right to know why their information is collected, for what purpose it is used and how it is kept safe. Patients also have greater rights to access the information that “Doreen Dempsey Physiotherapy Clinic” holds.
Why is information collected?
For a detailed and accurate physiotherapy assessment and treatment to take place, information about a patient’s current and past health needs to be obtained. Under the GDPR Doreen Dempsey Physiotherapy Clinic has a legitimate interest in the patients’ information and that is part of the contract between a health professional and their patient. This information allows us to give patients the best treatment possible.
How is this information used?
Information such as addresses, allow myself and staff to post receipts and invoices. Your telephone number allows us to send text reminders of appointments and communicate with you outside of appointment times. E-mail addresses are used for sending your individual online exercise programme when required through Physitrack. Your date of birth is used as a unique identification for your records. Medical details allow for a detailed assessment to take place which will help me diagnose and treat the problems that you have. In some instances, with your consent, there will be communication with the referring GP or consultant.
Who has access to your information?
All staff of Doreen Dempsey Physiotherapy Clinic are bound by patient confidentiality laws, the standards of conduct, performance and ethics of CORU (Regulating Health & social care professionals) and the Irish Chartered Society of Physiotherapy (ICSP) code of conduct. Your information will not be shared outside Doreen Dempsey Physiotherapy Clinic unless you have given consent, except when;
- requested by law
- in your best interests and you are unable to give consent
- in the public interest to prevent serious harm to others
How is your information stored?
The initial assessment and treatment notes are written on paper, which is kept in locked filing cabinets in the Clinic, Your name, address, telephone number and physiotherapy condition are recorded on a computer database for auditing purposes. The computer is password protected with robust security measures to prevent loss of information.
All notes will be kept for a period of 7 years after the last treatment or date of death at which point they will be permanently deleted.
How can you access your records?
You have the right to request to see the information that Doreen Dempsey Physiotherapy Clinic holds about you. All requests will be answered in the time frame of one month unless you are notified of a difference to this time scale. There will be no fee for information provided.
Requests can be made either verbally or in writing to:
Doreen Dempsey, Chartered Physiotherapist, Balla Medical Centre, Balla, Co. Mayo.
Tel: 094 9365146 or firstname.lastname@example.org.
In the instance where requests are excessive or unfounded, Doreen Dempsey Physiotherapy Clinic has the right to refuse and/or charge for time spent. This does not affect the individual’s right to complain to the data protection commissioner to seek judicial remedy. Where a fee is deemed appropriate Doreen Dempsey Physiotherapy will not comply with any requests until the fee is received.
You have the right to have the information we hold restricted;
- if you contest the accuracy,
- you need the information to establish, defend or exercise a legal claim
- you object to the information held.
In this instance all treatment will be stopped until the issue is resolved. You also have the right to object to Doreen Dempsey Physiotherapy Clinic holding your personal information on grounds relating to your particular situation and as with restriction, all treatments will stop and the notes will become restricted until the issue is resolved.
How is your information kept safe?
Written notes are kept in a locked filing cabinet in the clinic. When information is shared with others, GPs for example it will either be sent via encrypted email, posted, or hand delivered.
Doreen Dempsey Physiotherapy Clinic will take the utmost care to ensure that your personal information is safe whilst it is under our care. In the unlikely event that this safety was compromised you will be notified immediately as will the Data Protection Commissioner.
Contact form submissions are kept for a certain period for customer service purposes, but the information submitted through them for marketing purposes is not used.