Privacy Policy

Introduction

At Restorative Sports Therapies, we are dedicated to protecting your privacy and ensuring your personal data is handled responsibly. We adhere to the General Data Protection Regulation (GDPR) and the Data Protection Act 2018, including the Caldicott Principles as used by the NHS. This document explains what data we collect, how it is used, shared, and protected, as well as your rights regarding that data.

What Data We Collect

To provide you with high-quality healthcare, we collect and store:

• Personal Information: Name, date of birth, contact details, and other basic demographic information.
• Summary Medical History: Records of consultations, treatments, medications and medical conditions.
• Digital Records: Notes from digital communications such as phone consultations, emails, and online forms.

Why We Collect Your Data

Your data is essential for us to:

• Provide Care: Ensure safe, effective, and timely therapies based on your needs.
• Communicate with You: For appointments, follow-up care, and health updates.

How We Use Your Data

Restorative Medical Therapies uses your personal and medical data to:

• Deliver safe and effective Sports Therapies.
• Manage administrative tasks like appointment scheduling, reminders, and follow-up communications.
• Ensure that our services run smoothly and meet high standards of care.

Who We Share Your Data With

We only share your data when necessary for your care or when required by law. This may include:

• NHS Services: Sharing data within the NHS to coordinate your care and ensure continuity.
• Healthcare Providers: Data sharing with hospitals, specialists, or referrals.
• Approved IT Providers: NHS-approved third-party services that help manage and store your data securely.
• Public Health and Safeguarding Agencies: When required for legal reasons, such as safeguarding vulnerable individuals.

We never share your data for marketing purposes or with anyone not directly involved in your care.

How We Keep Your Data Safe

We take your data security seriously and use strict measures to protect it:

• Secure Systems: Data is stored in encrypted, government & NHS recognised electronic systems
• Controlled Access: Only authorized personnel can access your records.

Encryption: Data transfers and communications are encrypted to protect your information.

• Retention Policies: Your data is only stored for as long as necessary to provide care or meet legal obligations.

How We Handle Data Breaches

At Restorative Sports Therapies, we are committed to keeping your data safe, but in the unlikely event of a data breach, we have clear steps in place to minimize any impact:

• Immediate Action: We will investigate the breach as soon as it is identified to understand what happened and to prevent further unauthorized access.
• Notification: If a breach is likely to result in a risk to your rights and freedoms, we will notify you as soon as possible. We will provide clear information on what data may have been affected, what risks this poses, and what actions you can take to protect yourself.

Reporting to Authorities: We will notify the Information Commissioner’s Office (ICO) within 72 hours of any data breach that poses a significant risk to your privacy.

• Support: If your data has been compromised, we will provide guidance and support on what steps you should take, such as monitoring your financial accounts or changing passwords.

Your Rights

You have rights regarding the personal data we hold about you, including:

• Access Your Records: You can request a copy of your medical records at any time.
• Correct Your Data: If any information is incorrect, you can request corrections.
• Object to Processing: You may object to certain uses of your data, such as audits.
• Request Deletion: Under certain circumstances, you can request that we delete your data.

Be Informed About AI or Automated Decisions: We do not use AI systems in the provision or analysis of your therapies.  You will be notified of intention, and given the option to opt-out should this be a considered course of action.

If you have any concerns or would like to exercise any of these rights, please contact our Data Protection Officer, Richard McAtamney (COO) at Restorative Sports Therapies Ltd.

Contact Us

To make a data protection query, please email:  dataprotection@rs-therapies.com

To make a subject access request for your records, please email:  SAR@rs-therapies.com

For any further questions about how we use your data please contact:

Richard McAtamney (COO)

Restorative Sports Therapies Ltd.

richard@rs-therapies.com