Privacy notice

  • My Occupational therapy practice is bound by EU General Data Protection Regulation (GDPR) legislation.

 

  • When I am contracted to act as your Occupational therapist I need to gather the following types of information: names, telephone numbers, addresses, school/work contact details, relevant medical history, outcomes from work with other therapy providers, presenting difficulties.
  • I collect this information from you, the data subject, and from other people who know and interact with you and with whom you give me permission to liaise, through conversation, email and written reports.
  • This information is recorded and kept confidential to me, unless I am authorised by the data subject (or guardian if data subject is a child or has a guardian appointed) to share it with a specific individual or agency, or disclosure is required to meet legal requirements.
  • In line with legal requirements, I keep a record of this information for 7 years, or until the data subject is 18 years old if the data subject is a child.
  • The data subject rights are:
  1. The right to be informed (Articles 12 – 14 of the GDPR);
  2. The right to access information (Article 15 of the GDPR);
  3. The right to rectification (Articles 16 & 19 of the GDPR);
  4. The right to erasure (Articles 17 & 19 of the GDPR);
  5. The right to data portability (Article 20 of the GDPR);
  6. The right to object to processing of personal data (Article 21 of the GDPR);
  7. The right of restriction (Article 18 of the GDPR) and,
  8. Rights in relation to automated decision making, including profiling (Article 22 of the GDPR).