What is a Privacy Notice?
Under data protection law you, as a patient of Carlisle Family Chiropractic Centre (trading name of CFCC Ltd) have specific rights. To communicate these rights to you in a clear and concise manner, we are providing you with this privacy notice.
Who We Are
We are Carlisle Family Chiropractic Centre (CFCC Ltd), 50 Cecil Street, Carlisle, Cumbria, CA1 1NT, telephone number 01228 522161. For the purposes of processing your personal data, we are the Controller.
The Personal Data We Process and What We Do with It
We record and use the following categories of personal data which include: name, address, telephone numbers, date of birth and health data relevant for providing you with chiropractic care at our practice. Our lawful basis for storing and using this data is contract and we are allowed to store and use your health data as we are a recognised health care provider.
Sharing Your Personal Data
Except where we have a statutory duty of disclosure, we will only share your personal data with your explicit consent e.g. if we refer you to your GP or consultant, or to another chiropractic practice for x-rays.
Retaining Your Personal Data
It is a requirement of a registered Chiropractor in the UK to retain your data for a minimum period of 8 years following your last appointment. However, in line with our previous patient privacy notice, we will after 10 years from your last appointment with us, archive your records (rather than erase) unless you advise us to the contrary. Retaining your data securely here at our practice will enable you to return for chiropractic care at a future date, without incurring unnecessary additional time and cost.
Your Rights
As we process your personal data, you have certain rights. These are a right of access, a right of rectification, a right of erasure and a right to restrict processing.
- You may request a copy of your data at any time. Please make such a request in writing to the practice, whose details are shown above. Please provide the following information: your name, address, date of birth, telephone number and details of the information you require.
- If you believe any of the personal data we hold on you is inaccurate or incomplete, please contact us directly and any necessary corrections to your data will be made without undue delay.
- If you believe we should erase your data, please contact the practice, whose details are shown above.
- If you wish us to stop storing or using your data, please contact the practice, whose details are shown above.
- Where you have provided explicit consent for us to use your data you have a right to withdraw this consent at any time.
Data Breaches
Should your personal data that we control be lost, stolen or otherwise breached, where this constitutes a high risk to your rights and freedoms, we will contact you without delay. We will give you the contact details of the person who is dealing with the breach, explain to you the nature of the breach and the steps we are taking to deal with it.
Should You Wish to Complain
You can contact the Scottish Chiropractic Association if you have concerns, or wish to make a complaint, about the way we are processing your data.
Automated Decision Making and Profiling
We do not use any system which uses automated decision making or profiling in respect of your personal data.
How We Obtained Your Data
Your personal data has been collected directly from you, via our assessment and new patient registration forms and health information given to the chiropractor.