Privacy Policy for
Compass Heatlh clinic

Privacy Policy

Last Updated: October 2, 2024

Welcome to Compass Health Clinic (“we”, “our”, or “us”). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you visit our website and engage with our osteopathic private healthcare clinic based in the United Kingdom (“the Clinic”). By using our website and services, you agree to the terms outlined in this Privacy Policy.

We are committed to safeguarding the privacy of our patients and visitors, and we comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.

1. Information We Collect

We may collect and process the following types of personal information:

• Personal Identification Information: Name, date of birth, address, phone number, email address, and other contact details.
• Medical Information: Health history, treatment details, medical conditions, GP information, appointment history, and other healthcare-related information necessary for providing treatment.
• Financial Information: Payment details such as credit card numbers, billing addresses, and insurance information.
• Technical Data: IP address, browser type, time zone setting, location, operating system, and other technical data collected through our website.
• Communication Records: Emails, messages, phone call recordings, and other communications for quality and training purposes.

2. How We Collect Information

We may collect your personal information through the following means:

• Directly from You: When you fill out forms, schedule appointments, use our website, or contact us.
• Automatically: Through cookies, log files, and other tracking technologies as you navigate our website.
• From Third Parties: Such as your GP, other healthcare providers, or insurance companies, where required.

3. How We Use Your Information

We use your personal information to:

• Provide Healthcare Services: To assess your health needs and deliver personalised healthcare.
• Manage Your Appointments: To schedule, reschedule, and remind you of appointments.
• Communicate with You: About your treatments, health status, and any changes to services or policies.
• Process Payments and Invoicing: For billing purposes and to liaise with insurance providers where applicable.
• Comply with Legal Obligations: Such as safeguarding and regulatory requirements.
• Improve Our Services: Through data analysis and feedback to enhance patient experience.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: Where you have given explicit consent, for example, for direct marketing purposes.
• Contractual Necessity: To provide healthcare services as part of a treatment agreement.
• Legal Obligation: To comply with UK legal and regulatory requirements.
• Legitimate Interests: For clinical audits, research, and business development, while ensuring your data privacy.

5. Disclosure of Your Information

We do not sell or trade your personal information to third parties. However, we may share your data in the following situations:

• Healthcare Providers: With your GP, specialists, or other healthcare professionals involved in your treatment.
• Service Providers: Trusted service providers who support our operations, such as IT support and payment processors.
• Legal Requirements: When we are obliged by law to disclose your information or to protect our rights, property, or safety.

6. Data Retention

We retain your personal information for as long as necessary to provide healthcare services and comply with legal obligations. Medical records are stored securely and in line with statutory retention periods specified by the NHS or other regulatory bodies.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to collect data and enhance your browsing experience. You can control the use of cookies through your browser settings. For more information, please see our Cookie Policy.

8. Data Security

We implement technical and organisational measures to protect your personal information from unauthorised access, use, or disclosure. All data is stored and processed in compliance with the UK GDPR and the Data Protection Act 2018. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under UK data protection laws, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request corrections to any personal data that is inaccurate or incomplete.
• Right to Erasure: Request that we delete your personal data, under certain conditions.
• Right to Restrict Processing: Request that we restrict the processing of your data in specific circumstances.
• Right to Data Portability: Request that we transfer your data to another organisation, or directly to you.
• Right to Object: Object to the processing of your personal data in certain circumstances.
• Right to Withdraw Consent: If we are relying on your consent, you may withdraw it at any time.

To exercise these rights, please contact us using the information provided in the Contact section below.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites and encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or regulatory requirements. Any updates will be posted on this page with an updated “Last Updated” date. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or would like to exercise your rights under this Privacy Policy, please contact us at:

Compass Health Clinic
823 High Road, North Finchley, North London, N12 8PR
Email: andrew@compasshealthclinic.co.uk

This Privacy Policy is intended to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, ensuring that your data is handled with care and in accordance with UK data protection standards.