Injury Rehabilitation Care Centre Limited Privacy Notice

For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018), the Data Processor, in relation to any personal data you supply, is Injury Rehabilition Care Centre Limited.

Section 1 – Who We Are:

In this Privacy Notice, ‘we’, ‘us’, and ‘our’ refers to Injury Rehabilitation Care Centre Limited. Injury Rehabilitation Care Centre Limited is a data controller and is registered as such with the information commissioners office under registration number ZA509360.

You can ask for further information about our use of your personal information, by contacting our data protection officer either by email at [email protected] or by post at 8 Atlas Court, Balby Carr Bank, Doncaster, DN4 5JT.

Section 2 – What Information We Process:

We process your information in order to arrange rehabilitation on your behalf.

We may receive personal information about you from any of the following sources:

• You, your instructed solicitor or another party instructed on behalf of you or your instructed solicitor
• A medical expert, rehabilitation provider or diagnostic provider
• Your GP or hospital (If medical records are required, Injury Rehabilitation Care Centre will contact you for your signed consent prior to any GP or hospital being contacted)

The information we receive may consist of the following personal or special category data:

• personal information about you such as your name, address, contact details and date of birth
• information about the circumstances resulting in personal injury,
• special category personal information, such as any medical conditions resulting from the accident or past medical history;
• details of any complaint should there be a need to make one
• data relating to your use of our website including your IP address

CCTV is in operation in and around the premises for security and monitoring purposed.

Section 3 – How We Will Use Your Information:

Your personal information may be used:

• to arrange rehabilitation

We process your information for the purpose of legitimate interest. Your data may also be used in the following ways:

• For monitoring of calls for training and quality purposes
• To contact you in relation to your rehab.
• to analyse your use of our website and gather feedback on to enable us to continually improve our website and user experience;
• to provide access to our website;
• to personalise and tailor your experience on our website;

Section 4 – Who We Might Share Your Information With:

Your information may be used for the purposes of providing rehabilitation by us, the instructing solicitor, treatment provider, and the instructed therapist. It may be disclosed to regulatory bodies, auditors and other authorised bodies for the purpose of monitoring and or enforcing our compliance with any regulations or legislation.

We may also share your personal information with:

• other organisations where we have a duty to or are permitted to disclose your personal information by law (e.g. if we received a valid request from the police or other third party organisation in the interest of preventing and detecting crime)
• any person that you have given consent to discuss your case. We are not able to discuss any details relating to your case without first obtaining your consent.

Section 5 – How Long Do We Keep Your Data:

Your personal data will be held on record for 7 years for the purposes for which it was originally collected and for the purpose of defending a legal claim or professional indemnity claim. This enables us to help you should there be any issues relating to the rehabilitation treatment provided. Your personal data will be deleted and erased after this period.

Section 6 – Your Rights and Access to your Information:

You have a number of rights concerning the personal information we use, these include the right to:

• ask for access to and a copy of your personal information. Please see the ‘Right to access’ section for more information.
• ask us to correct personal information.
• ask us to delete personal information. Please see ‘Right to Erase’ section for more information.
• ask us to restrict the use of your personal information.
• ask us to object to the use of your personal information.
• where you have previously given us consent to process your personal information you can withdraw that consent.
• complain to the Information Commissioner’s Office at any time if you object to the way we use your personal information. For more information please go to www.ico.org.uk
• object to any automated decision including profiling.
• request information for transfer to another company, also known as data portability

Right to Access

The information requested will be sent within 1 month unless the requests are complex or numerous in which case, we may extend this time by a further 2 months.

There will be no charge for a request unless the request is excessive, repetitive or frivolous. In these circumstances a reasonable fee may be charged.

Right to Erase

You can request that we erase your personal data from our systems. We may be unable to facilitate your request if we believe that:

• We have a legal obligation to keep your data or;
• It is required for establishing or defending a legal claim.

Section 7 – How to contact us

If your wish to contact our Data Protection Officer, please send an email to [email protected], write to 8 Atlas Court, Balby Carr Bank, Doncaster, DN4 5JT or call 01302 564548. If you would like this notice in another format (for example: audio, large print, braille) please contact our Data Protection Officer on the above details.

Section 8 – Changes to this policy

We may change this policy from time to time, when we do, we will inform you via our website.