This Privacy Policy explains how Sheffield Sports Medicine collects, uses, stores and protects personal information.
Our contact details
Privacy Policy completed: Monday, 06 July 2020.
The type of personal information we collect
We currently collect and process the following information:
- Name
- Address
- Email address
- Telephone number
- Date of birth
- Photos and videos on the membership programme
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- To form a contract for the service you are purchasing.
- To get in touch with you to provide information about our services or to form part of the service you have bought.
- To understand your medical history so we are better able to help you.
We may also receive personal information indirectly from the following sources:
- Your GP, where we may need to contact them for certain information about conditions you present to us.
- Your carer, where it is helpful to receive information from them about the problems you encounter.
- Your Power of Attorney, where they help you make decisions or make decisions on your behalf, so we can give you the best care possible.
We use the information you have given us to understand your medical conditions and history, to help you effectively, and to stay in contact with you.
We may share this information with your GP, carer or Power of Attorney if we feel it will help you to get better. We will not share this information with anyone else unless a child is being abused or a life is at risk.
Our lawful basis for processing your information
Under the UK General Data Protection Regulation, the lawful bases we rely on for processing this information are:
- You are able to remove your consent at any time by contacting [email protected].
- We have a contractual obligation.
- We have a legitimate interest.
How we store your personal information
Your information is securely stored using systems and services including:
- Acuity Scheduling
- Wufoo
- Click Funnels
- Google Drive
- ManyChat
- Stripe
- Trello
- Slack
- QuickBooks
- Dropbox
- Mega.nz
- Box.net
- OneDrive
- A secure hard drive in clinic
We suggest that you make sure you are happy with the privacy policies of the above companies. We do not assume responsibility for the manner of use or misuse of information made available by you on those websites. We advise you not to provide personal information without assuring yourself of their Privacy Policy statements.
Payments
Payments for on-premises services are taken through a card machine either when you are in clinic or prior to your first appointment on the phone. When we take your payment details over the phone, we do not keep or store them. When payments are taken in clinic, we are not exposed to, nor do we store, any of your financial information.
Payments for the membership programme are taken through Stripe. We suggest that you make sure you are happy with Stripe's Privacy Policy. We do not assume responsibility for the manner of use or misuse of information made available by you on Stripe.
How long we keep your information
We keep all information that we collect about a patient for 5 years. We will then dispose of your information by deleting the digital files we have stored.
Cookies
We put small files, known as cookies, onto your computer to collect information about how you browse the site. Please see our Cookie Policy for more information.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access. You have the right to ask us for copies of your personal information.
- Your right to rectification. You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing. You have the right to ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing. You have the right to object to the processing of your personal information in certain circumstances.
- Your right to data portability. You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] or 01143 211852 if you wish to make a request.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected] or 01143 211852.
You can also complain to the Information Commissioner's Office if you are unhappy with how we have used your data.
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Helpline number: 0303 123 1113.
ICO website: https://www.ico.org.uk