Privacy Policy

​

YOUR PERSONAL INFORMATION - GENERAL DATA PROTECTION REGULATION (GDPR)

GDPR is bringing in new legal protection for personal information from May 2018 stipulating what personal information Medical Mindset Coach retains of the clients why, and what the rights of the client are. 

The Purpose of processing Client Data 

In order to provide professional treatments, Medical Mindset Coach will need to gather and retain potentially sensitive information about the client’s health. Medical Mindset Coach will only use this information for informing treatments and associated recommendations concerning aspects of health and well-being which Medical Mindset Coach therapists will offer to the client. Medical Mindset Coach takes basic contact details and information via this website to allow My Holistic Way therapists to contact you and handle bookings.

Lawful Basis for holding and using Client Information
As the therapists of Medical Mindset Coach are full members of each professional body, they abide by all the Codes of Practice and Ethics. The lawful basis under which Medical Mindset Coach hold and use your information is:

Professional reasons: to retain the information in order to provide the client with the best possible treatment options and advice.

As Medical Mindset Coach hold special category data (i.e. health-related information), the Additional Condition under which Medical Mindset Coach hold and use this information is: for Medical Mindset Coach therapist's to fulfill their role as a health care practitioner bound under the professional body's Confidentiality as defined in the Code of Practice and Ethics.

What information does Medical Mindset Coach hold and what Medical Mindset Coach do with it
In order to give professional treatments, Medical Mindset Coach will need to ask for and keep information about the client's health. Medical Mindset Coach therapists will only use this for informing treatments and any advice is given subsequent to the client’s treatment.

​

The following information to be held is:

• Clients contact details

• Medical history and other health-related information (which Medical Mindset Coach therapists will take from the client during the first consultation)

• Treatment details and related notes (which Medical Mindset Coach therapists will take after each consultation) Medical Mindset Coach is committed to ensuring that the client's personal data is secure. 

​

Medical Mindset Coach therapists will NOT share the client's information with anyone else (other than within the business practice, or as required for legal process) without explaining why it is necessary, and getting the client's explicit consent.

How Long Medical Mindset Coach Retain Your Information for:

Medical Mindset Coach will keep your information for the following period's claims occurring’ insurance: (records to be kept for 7 years after last treatment)

The client's data will not be transferred outside the EU without the client's consent. 

Protecting Your Personal Data

In order to prevent unauthorised access or disclosure, Medical Mindset Coach has put in place appropriate technical, physical and managerial procedures to safeguard and secure the information we collect from the client.

Medical Mindset Coach will contact the client using the contact preferences given in relation to:

• Appointment times 

• Treatment information or 

• Information related to the client’s health 

CLIENT RIGHTS

GDPR gives the client the following rights:

• The right to be informed:

To know how your information will be held and used (this notice).

• The right to data portability:

Allows individuals to obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.​

• The right of access:

To see your therapist’s records of your personal information, so you know what is held about you and can verify it.

• The right to rectification:

To tell your therapist to make changes to your personal information if it is incorrect or incomplete.

• The right to erasure (also called “the right to be forgotten”):

For you to request your therapist to erase any information they hold about you

• The right to restrict processing of personal data:

You have the right to request limits on how your therapist uses your personal information

Under certain circumstances, you can request a copy of personal information held electronically so you can reuse it in other systems.

• The right to lodge a complaint with the Information Commissioner’s Office:

​To be able to complain to the ICO if you feel your details are not correct, if they are not being used in a way that you have given permission for, or if they are being stored when they don’t have to be

PRACTITIONER’S RIGHTS

​

• The right to object:

To be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for certain purposes.

Rights in relation to automated decision-making and profiling.

​​

Please note:

• If the client does not agree to the practitioner keeping records of information about the client and the client's treatments, or if the client does not allow them to use the information in the way they need to for treatments, the practitioner may not be able to treat the client. ​

• The practitioner has to keep the client's records of treatment for a certain period as described above, which may mean that even if the client asks the practitioner to erase any details about the client, the practitioner might have to keep these details until after that period has passed.

• Your practitioner can move the client's records between their computers and IT systems, as long as the client’s details are protected from being seen by others without the client's permission.

​

Full details of your rights can be found at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

If you wish to exercise any of these rights, please use the contact details given above.

If you are dissatisfied with the response you can complain to the Information Commissioner's Office; their contact details are at: www.ico.org.uk