Privacy policy
At Luton Osteopathic and Sports Injury Clinic (LOSIC), we are committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal information when you visit our clinic and engage with our services.
1. Information We Collect
We collect personal data to provide you with the best possible care and service. The types of information we collect include:
- Personal Information: Name, contact details (email, phone number), date of birth, and any other information you provide when filling in forms in our clinic or booking appointments.
- Medical Information: Health data relevant to your treatment, including medical history, diagnosis, and treatment records.
- CCTV Footage: Video recordings captured on our CCTV system, which operates in clinic areas for security and safety purposes.
2. How We Use Your Information
We use the information we collect in the following ways:
- For medical treatment: To assess and provide you with the appropriate osteopathic or sports injury treatment.
- To communicate with you: Responding to your inquiries, booking appointments, and sending important updates regarding your treatment or the clinic.
- For legal and regulatory reasons: To comply with our legal obligations, including record-keeping and reporting.
- For safety and security: CCTV footage is used to ensure the safety of our patients and staff, as well as for crime prevention and detection.
3. Legal Basis for Processing
We process your personal data under the following lawful bases:
- Consent: If you have given explicit consent for certain types of processing (e.g., marketing).
- Contractual necessity: Where processing is necessary to provide you with the treatment or services you have requested.
- Legal obligation: When we are required to process personal data by law.
- Legitimate interest: For the operation and improvement of our services, and for security purposes through CCTV monitoring, provided that these interests are not overridden by your rights and freedoms.
4. Sharing Your Information
We will not share your personal information with third parties except in the following circumstances:
- Healthcare providers: If necessary for your treatment, we may share your data with other healthcare professionals involved in your care (e.g., specialists, physiotherapists).
- Service providers: We may use third-party service providers to perform functions on our behalf (e.g., IT support or payment processors) but only to the extent necessary to perform these services.
- Legal requirements: We may disclose your information to comply with legal obligations or to protect the rights, property, or safety of LOSIC, our patients, or others.
- CCTV footage: CCTV recordings may be shared with law enforcement or other authorities for crime prevention and detection if required by law.
5. Data Security
We take the security of your personal information seriously and have implemented appropriate measures to protect it from unauthorised access, loss, or misuse. These measures include:
- Encryption: We encrypt sensitive personal and medical information.
- Access controls: Only authorised staff have access to your data.
- Data storage: All personal data is stored securely in compliance with data protection regulations.
- CCTV footage storage: CCTV recordings are securely stored for up to 30 days and automatically deleted unless required for legal purposes.
6. CCTV Monitoring
For the safety and security of our patients and staff, CCTV is in operation within clinic areas, including treatment rooms. These cameras capture video footage (with audio). CCTV recordings are stored securely and retained for up to 30 days unless required for crime detection or legal purposes.
Patients are informed about CCTV monitoring on our consent forms and in posters within the clinic and asked to give their consent before receiving treatment in monitored areas. Only authorised personnel or law enforcement (if necessary) will have access to the CCTV recordings.
7. Your Rights
You have the following rights regarding your personal data:
- The right to access the personal data we hold about you.
- The right to request correction of any inaccurate or incomplete data.
- The right to request deletion of your personal data, where applicable.
- The right to object to the processing of your personal data in certain circumstances.
- The right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data is being mishandled.
image www.pexels.com/life of Pix
