Privacy Notice (UK GDPR)
Peak Occupational Therapy is committed to protecting your personal information and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Peak Occupational Therapy is the Data Controller for your personal data. If you have any questions about this notice or how your data is used, please contact us using the details provided when you booked your appointment.
We may collect personal information such as your name, contact details, date of birth, and emergency contacts. We also collect health information relevant to hand therapy, including assessment findings, treatment notes, and correspondence from other healthcare professionals. This health information is classed as special category data.
We use your information to provide safe and effective hand therapy care, manage appointments, communicate with you, maintain accurate records, and meet legal, professional, and insurance requirements.
We process your data for the provision of health care, performance of a contract, compliance with legal obligations, and where required, with your consent.
Your information may be shared with other healthcare professionals involved in your care, your GP or referrer, private medical insurers, or regulatory bodies where required by law. We only share information that is necessary and appropriate.
For clients under 18 years of age, information is usually managed with a parent or legal guardian. Where a young person is assessed as Gillick competent, their views and rights to privacy will be respected.
We take appropriate steps to keep your data secure, including secure electronic systems, password-protected devices, and locked storage for paper records. Access is restricted to authorised individuals only.
We keep records in line with professional guidance and legal requirements. Health records are normally kept for at least eight years after the end of treatment, and longer for children.
You have the right to access your data, request corrections, request deletion where appropriate, restrict or object to processing, and withdraw consent where consent is the lawful basis. You may also complain to the Information Commissioner's Office.
Information may be shared without consent where there is a safeguarding concern or a legal obligation to do so.
We may update this Privacy Notice from time to time. The most recent version will always apply.