Privacy and Cookies Policy

Privacy Policy

Orchard Clinic, Catherine House, Adelaide Street, St Albans AL3 5BA is a Private Physiotherapy Practice and in its capacity as a data Controller is committed to protecting your personal information. By agreeing to this Privacy Policy Data you will be giving your explicit consent to our obtaining, using and disclosing your personal information as described in this policy. 

Information we collect and how we use this information

By attending Orchard Clinic for Physiotherapy and related services we have a contractual and legal requirement to process and hold your data. The information we obtain about you will be used by Orchard Clinic for the following purposes:

  • to plan, implement and monitor your rehabilitation
  • to facilitate your recovery
  • for internal administration purposes

We may also use the information to improve our services. We may periodically contact you about new services, special offers or other information which we think you may find interesting, using the information which you have provided.

From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, or mail. We may use the information to customise the website according to your interests.

Sensitive data may be collected to help us with the services we provide you.  Sensitive data includes information about your health.

How we obtain and disclose your information

We may obtain your information from, or disclose it to, your medical practitioner, and any other relevant health/professional, your employer/school (where appropriate), the job centre/DEA officer, the insurance company or other funding source, legal representatives or any other third party involved with your rehabilitation.  Your information will be used for the purpose of assisting with your rehabilitation, helping you get back to your normal activities/work and promoting your well-being.

We may also collect personal data from our Website, we use analytical and statistical tools that monitor details of your visits to our website and the resources that you access, including, but not limited to, traffic data, location data, weblogs and other communication data (but this data will not identify you personally).

For Marketing purposes, we may pass your details to a 3rd party for marketing purposes, we respect your privacy.  This will only relate to basic information (Full name, email address), so that you can receive further information about the services we provide at Orchard Physiotherapy Clinic.  You will not be automatically opted in to any marketing campaigns that we run, consent will be obtained in the first instance.  If you have opted in to receive our newsletters, you do have the option to unsubscribe at any time.

We may disclose your information to:

  • Regulatory bodies to enable us to comply with the law and to assist fraud protection.
  • Suppliers and sub-contractors for the performance of any contract we enter into with them or you.
  • Professional advisers including auditors, accountants, lawyers and insurers.
  • Our service providers and agents or third parties which process information on our behalf (e.g. Analytics and search engine providers that assist us in the improvement and optimisation of our site).
  • Third party platform advertising – Where you respond to communications we post on third-party platforms (such as Facebook and Google), we may also share your information with those third parties in order to serve targeted advertising/content to you via the relevant third party platform based on your profile/interests. Your information is used by the third-party platform provider to identify your account and serve advertisements to you.  You can control what advertisements you receive via the privacy settings on the relevant provider’s platform and you should consult the third party’s help/support centre for more information.
  • Should we decide to sell any business assets, in which case we may disclose your personal data to the prospective buyers of such business or assets.

Your right as an individual

You are able to exercise certain rights in relation to your personal data that we process. These are set out in detail at https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

You have the right to request access to any personal information relating to you that is held by us.  To do this you will need to put your request for access in writing and send us proof of your identity (e.g copy of your driving licence or passport and a recent utility bill).

You have the right to have all your personal data erased from our system. However, we have a legal obligation to retain your information for 8 years, or until you are 25 years old if you were under 16 years of age when you received treatment. We require a signed letter of instruction to action a full data erasure.

All Clients assessed from May 2010 will have their information stored indefinitely in case of need to access this information in potential future legal cases.

Protecting your information

We will take all reasonable technical and organisational security measures to safeguard your personal information whilst it is in our possession or control so that it is not, for example, lost, stolen or tampered with.   If you have concerns about the accuracy of the information obtained or released by The Orchard Clinic please discuss this with your physiotherapist who will assist you to resolve this. If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us on 01727 855414.

Any employee processing your personal data will be acting on our instructions, and all data will remain confidential.

All information provided to us is stored on ‘cloud based servers’ such as Google Drive and Dropbox.  We trust these companies to have robust security measures in place and to be GDPR compliant.

Where necessary encrypted communications may be used for additional security, and password protections will be applied.

Anyone under the age of 16 must have the written consent of a parent or legal guardian for their information to be obtained and stored.

Cookies Policy

What are Cookies?

A cookie is simply a technology for remembering something about you. A cookie is a small file saved on your hard drive.

Without cookies, a website loses its memory of you every time you visit a new page. Once you visit a new page, it doesn’t remember who you are.

Without any cookie memory, a website can’t be helpful and make your visit more personal. It can’t let you log in, because it forgets who you are. It can’t let you buy anything, because it forgets what you’re buying. But it also means it can’t track you. Some websites use cookies to target ads at you and some share their cookies, so that ads on one website know what you liked on another – we do not use cookies in this way.

Controlling and blocking cookies 

You can set your browser to notify you when you receive a cookie. This enables you to decide if you want to accept it or not. For more information, including how to control and disable cookies, please visit www.cookiesandyou.com or www.allaboutcookies.org.

We do not store unencrypted personally identifiable information in the cookies.

How we use Cookies

Cookie Law Compliance: This cookie is placed if you click the Allow button in the cookie message. It tells us you have given your consent to the use of cookies on our site and stops this message from displaying.

Analytics: We use Google Analytics to recognise and count the number of visitors and to see how visitors move around our site. This helps us to improve the way our website works, for example by making sure users are finding what they need easily. For more information see how Google Analytics uses cookies.

YouTube: If we embed YouTube video on our site and you watch that video then YouTube by default sets a tracking cookie for their marketing purposes. For more information see how to manage YouTube cookies.