GDPR 2020 Podiatrist PRIVACY NOTICE
Information I Collect
To aid your treatment or as part of purchasing something from my business you will normally provide me with certain information, such as your name, email address, postal address, medical information and payment information. I will store your information on an electronic patient record and diary system which is fully password protected.
Why I Need Your Information and How I Use It
I rely on a number of legal bases to collect, use, and share your information, including:
Surefoot Podiatry does not contact patients with regards to marketing material.
Information Sharing and Disclosure
Information about my patients/customers is important to my business. I share your personal information for very limited reasons and in limited circumstances, as follows:
Transfers of Personal Information Outside the EU
For domiciliary visits, I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer. Google Calendar, Google Contacts and Microsoft Outlook are Privacy Shield certified.
You have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:
How to Contact Me
For purposes of the GDPR, I, Drew Ewing, am the data controller of your personal information. If you have any questions or concerns, you may contact me at firstname.lastname@example.org
Alternately, you may mail me at:
Longton Podiatry Clinic
68a Liverpool Road