Privacy and your records

Sample text for the theme’s demo. This page is written for Alder, an invented health practice, and is not legal advice. Health records have their own rules in every country: replace it with your practice's own text, reviewed by someone qualified, before you publish.

This page explains which personal data Alder Practice (“Alder”, “we”) handles when you visit this website, send us a question or a booking request, and when you are our patient. Your health records have their own section below, because the rules for them are stricter.

Who is responsible

Alder Practice, Harbour Street 14, 1011 AB Alderton, is the controller for the data on this page. Questions about your data, or a request to see, correct or delete it, go to privacy@alder.example, or ask Elise at reception.

This website

• No tracking. The site uses no analytics, advertising or tracking cookies and loads no third-party trackers. If you choose light or dark, your browser remembers it on your device; it is never sent to us.
• Our host processes your IP address and the pages you request, to deliver and protect the site. Legal basis: our legitimate interest in a secure website.

Questions and booking requests

When you write to us or send a booking request, we receive your name, phone number, e-mail and what you write. We use it to answer and to book your visit, and delete it after six months if you don’t become a patient. Legal basis: steps you ask us to take before treatment. The forms ask for no health details, and we ask you not to add any: your practitioner asks about that at the visit, where it is kept in your record.

Your health records

When you are our patient, we keep a record of your treatment. Health data is a special category of personal data, and we handle it as such.

• What we store: your contact and insurance details, your referral if there is one, what you tell us about your complaint, what we find at the examination, your plan and the notes of every session.
• Why: to treat you well and safely, and because the law obliges care providers to keep a record. Legal basis: the treatment agreement between you and your practitioner, and our legal obligation.
• Who sees it: only the practitioners who treat you. Practitioners of another treatment see your file only with your consent. Your psychologist keeps their notes apart; nobody else in the practice can read them.
• Who we share it with: your insurer receives what it needs to pay the invoice (the treatment and the dates, never the notes). Your GP receives a short letter if you agree. Nobody else, unless the law requires it.
• How long: twenty years after your last treatment, as the law asks of health records, or longer if that is needed for your care. Then we delete it.
• Where: in a practice system built for health records, on servers in the European Union, encrypted, with access logged.

Your rights

You can see and get a copy of your record, have mistakes corrected, add your own statement to it, and ask us to delete it (we must keep some records for the legal period, and tell you which). You can also complain to the data protection authority in your country.