DATA PROTECTION OFFICER

As we record and use sensitive health data we take the protection of this data very seriously.  We have therefore appointed a Data Protection Officer, who is your first point of contact for any matters regarding your personal data that we process.  Our Data Protection Officer can be contacted on 01534 876510, email enquiries@orchard.co.je or at the above postal address.

​

 THE PERSONAL DATA WE PROCESS AND WHAT WE DO WITH IT

 We hold or will collect personal information about you from a variety of sources, including information provide by you directly. The sources of data and the types of data collected are listed below. 

 The categories of personal information that we may collect directly from you include:

​

(a)  Personal details (for example, your name, date of birth, family information);

(b)  Your contact details (for example, your address, phone number and email address);

(c)  Your health and physical data (for example medical history, disabilities, prescriptions, family history, height, weight)

(d)  Details of your current medical issue.

The categories of information we may collect from other sources (e.g. your GP) include:

 (a)  Personal details (e.g.  your name, address, date of birth, marital status);

(b)  Your contact details (for example, your address, phone number and email address);

(c)  Information necessary to provide an explanation of the reason for referral, including relevant health data and medical history.

​

 HOW WILL WE USE YOUR PERSONAL INFORMATION AND WHY?

 The ways we use and share your information include:

 (a)  Identifying you and making sure your details are up to date;

(b)  Communicating with you (e.g. appointments, fee payment, clinic information, clinic marketing)

(c)  Communicating with the Medical Practitioner who referred you;

(d)  Communicating with Practitioners we refer to;

(e)  Communicating with your Medical Insurance Provider.

(f)   Communicating with Lawyers and insurance brokers for the purpose of insurance benefits or in connection with insurance and personal injury claims.

 

We will not pass your personal data to any third party without your prior agreement.

 

Legal Basis For Using Your Personal Information

 We must have a legal reason to use your personal information.  This will usually be one of the following:

 (a)  To fulfil our legal obligations (including any contractual obligations);

(b)  To meet our legitimate interests to administer our business efficiently;

(c)  Because using the information is necessary in relation to a legal claim.

​

Where we process ‘special categories’ of information, for example information concerning your health, our expected legal basis for using your personal information is that it is necessary for the purposes of carrying out our obligations in connection with patient care and is authorised under Jersey law. (N.B. the UK Act of Parliament/States of Jersey law authorising this legal basis for processing special categories of personal information has not been passed as at the date of this notice). 

 

International Data Transfer

 Your personal information may be transferred to, stored, and processed in a country that is not regarded as ensuring an adequate level of protection for personal information under European Union law.  Where your personal information is to be transferred outside the UK (for example by your Medical Insurance Provider or insurer) we will make sure that they understand their accountability to have appropriate safeguards in accordance with applicable legal requirements to protect the information.  For more information on any safeguards in place, please contact us.

 

​

RETAINING YOUR PERSONAL DATA

​

 We have in place measures to protect the security of your personal information and keep it confidential.  We review these measures regularly to make sure they remain appropriate.

 When sharing your personal information with another third party we will make them accountability to have measures in place to protect your personal data, keep it confidential and agree to use the personal information only for the purposes we set out.

 We will keep personal information for as long as we have a relationship with you.  When deciding how long to keep your personal information, after our relationship with you has ended, we take into account our legal obligations and legal expectations.  We will be required to retain your personal data for a minimum of 8 years and may retain records longer, for example in order to provide you with a better patient experience or investigate potential legal claims.

​

 YOUR RIGHTS

 You have rights regarding your personal information, including the right in certain circumstances to access, correct, delete or transfer your personal information or to restrict or object to our use of it.  We may need extra information from you to deal with any request.  If you would like to discuss or exercise these rights, please contact us.

 You may request a copy of your data at any time.  Please make such a request in writing or by email to the Data Protection Officer, whose details are shown above.  Please provide the following information:  your name, telephone number, email address and details of the information you require.  We will need to verify your identity so we may ask for a copy or sight of your passport or driving licence and/or recent utility bill. 

If you believe any of your personal data we hold on you is inaccurate or incomplete, please contact the clinic directly and any necessary corrections to your data will be made promptly. 

 If you believe we should erase your data please contact the Data Protection Officer, whose details are shown above. 

 If you wish us to stop storing or using your data, please contact the Data Protection Officer, whose details are shown above. 

 

DATA BREACHES

Should your personal data that we control be stolen or otherwise breached where this constitutes a high risk to your rights and freedoms, we will contact you without delay.  We will explain the nature of the breach, the steps we are taking to deal with it and a point of contact for further information. 

 

AUTOMATED DECISION MAKING AND PROFILING

We do not use any system which uses automated decision making or profiling in respect of your personal data

 

CHANGES TO THIS POLICY

We may update this privacy notice from time to time.  You can ask us for a copy of the most up to date policy at any time or access it from our website: www.orchard.co.je

​

HOW TO CONTACT US

 The Orchard Chiropractic Centre is considered to be a data controller responsible for the collection and use of your personal information.  If you have any questions or concerns please contact us by using the following contact details:

 Phone:           01534 876510

 Email:             reception@orchard.co.je

 Address:       Orchard Chiropractic Centre Ltd

                          Orchard Corner

                           La Route due Fort

                           St Helier

                           Jersey, JE2 4PA

 

 If you believe that we have not resolved your concerns, you can complain to the Information Commissioner’s Office at https://oicjersey.org

 

We strongly encourage you to let us know if your personal information changes or if you think the information we hold about you is out of date.