Privacy Policy

Abbots Langley Clinic (“ALC, We, Our, Us”) diagnoses and treats health conditions under the General Osteopathic Council, Chartered Society of Physiotherapists, and Health and Care Professionals Council, based at 10 Abbots Road, Abbots Langley, Hertfordshire WD5 0AZ. ALC is the trading name of Edward C. Buckwald Ltd, a company registered in England and Wales under Company Number 4420972.

This Privacy Policy specifies how we process and maintain your Personal Data, Consent, and Disclosure to third parties.

PERSONAL DATA, CONSENT AND DISCLOSURE

In sharing your Personal Data with ALC you Consent to Us obtaining and securely logging such Data, including Your contact information; details of Your medical history (but only that which is relevant and necessary for treatment); details of any currently prescribed medication; information pertinent to Your treatment; and, for ALC to maintain Your Personal Data.

YOUR PERSONAL DATA IS ALWAYS HELD SECURELY and is not shared with any third party that is not involved in your treatment, although for data storage purposes, it may be handled by pre-vetted staﬀ, who have all signed an integrity and conﬁdentiality agreement.

It is a condition of treatment that you give your explicit consent to allow our staff to document and process your Personal Data per this Privacy Policy.

Contact details provided by you (telephone numbers, email addresses, postal addresses) may be used to remind you of appointments, provide reports or other information regarding your treatment, and respond to your enquiries.

OUR STAFF WILL NOT DISCLOSE YOUR PERSONAL DATA UNLESS COMPELLED to meet legal obligations, regulations or valid government requests. ALC may also enforce its Terms and Conditions, including investigating potential violations of its Terms and Conditions, to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of its staﬀ.

ALC may occasionally act on behalf of Our patients in the capacity of Data Processor, when we may promote other practitioners based at our premises, who may not be employed by us. ALC will only collect the information needed so that we can provide you with the services you require.

ALC WILL NOT SELL OR BROKER YOUR PERSONAL DATA. ALC will not share Your Personal Data with third parties unless it is relevant or beneﬁcial to your treatment, for example conferring with another practitioner or forwarding information (not your actual ﬁle) when booking an MRI/x-ray, where basic information (relevant medical history/ treatment and contact details) will be required. We will always seek Your consent before taking any such action.
We ask that you inform Us of any changes in Your circumstances, such as change of address/telephone numbers to enable us to keep Your Personal Data up to date.

THE LEGAL BASIS FOR PROCESSING ANY PERSONAL DATA is to meet Our contractual obligations obtained from explicit Patient Consent. The legitimate interest pursued by ALC is to promote treatment for patients with varying health problems who may beneﬁt from Our treatment services.

RETENTION POLICY

ALC will process Your Personal Data during the duration of any treatment and will continue to store only the personal data needed for 8 YEARS after the contract has expired, to meet any legal obligations. After 8 years, all Personal Data will be deleted, unless basic information needs to be retained by Us to meet future obligations to You. Should You make an appointment for treatment after the 8-year retention period, You will be required to attend ALC as a new patient. Personal Data concerning minors who have received treatment from ALC will be retained by Us until the minor has reached the age of 25.

DATA STORAGE

To store Personal Data, We use an electronic record system, which is not accessible by any third party, and complies with all GDPR requirements. Only basic Personal Data will appear on invoices and receipts issued by Us to You for Our products and services, which are recorded and password-protected on our electronic record system.

INFORMATION REQUESTS

At any time, you have the right to:

ACCESS: To request a copy of your Personal Data.
RECTIFICATION: To correct Personal Data that is inaccurate or incomplete.
PORTABILITY: To request Personal Data be transferred to a third party.
TO BE DELETED: Under certain circumstances, you may request that We delete Personal Data from Our records.

To request Your Personal Data, You must provide Us with current photographic identiﬁcation (either a driver’s license or passport) and a recent utility bill not older than 3 months. All requests for Personal data should be made in person at ALC, by emailing [email protected], or by post (addressed to Data Processor, Abbots Langley Clinic, 10 Abbots Road, Abbots Langley, Hertfordshire WD5 0AZ). We will endeavour to respond to Your request promptly. If Your request under Rights of Access is denied by Us, We will provide You with an explanation. Please note, that You do not have the right to legally challenge our decision.

Should you wish to submit a complaint about how We process Your Personal Data, please write to the Data Processor, Abbots Langley Clinic, 10 Abbots Road, Abbots Langley, Hertfordshire WD5 0AZ, or email [email protected].

Cookie Policy

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

ANALYTICS

We use Google Analytics to gather anonymised information about visitors to this site and how they interact so we can improve website performance.

EMBEDDED CONTENT FROM OTHER WEBSITES

This site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website. If you do not accept cookies, this functionality might not work as intended.

WHO WE SHARE TRACKING DATA WITH

We will not share your personal information with third parties for marketing purposes. Personal information will only be given to a third party when we are legally obliged to do so. Anonymous data derived from cookies may be shared with third parties, but only for technical purposes, not for marketing.

MARKETING

You will not be sent any unlawful marketing or spam. We will always work to fully protect your rights and comply with our obligations under the Data Protection Legislation and the Privacy and Electronic Communications (EC Directive) Regulations 2003, and you will always have the opportunity to opt-out. We will always obtain your express opt-in consent before sharing your Personal Data with third parties for marketing purposes and you will be able to opt-out at any time.

We will only use your Personal Data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that or those original purpose(s) and need to use your personal data for that purpose. If we do use your personal data in this way and you wish us to explain how the new purpose is compatible with the original, please contact us.

If we need to use your Personal Data for a purpose that is unrelated to, or incompatible with, the purpose(s) for which it was originally collected, we will inform you and explain the legal basis which allows us to do so.

In some circumstances, where permitted or required by law, we may process your Personal Data without your knowledge or consent. This will only be done within the bounds of the Data Protection Legislation and your legal rights.

HOW WE PROTECT YOUR PERSONAL DATA

We will store all Personal Data you provide securely. All traffic between your browser and this website is encrypted and protected via SSL (Secure Socket Layers).

The security of your Personal Data is essential to us, and to protect your Data we take several important measures, including the following:

Sensitive Personal Data will never be stored or transferred with the company;
Limiting access to your Personal Data to those employees, agents, contractors, and other third parties with a legitimate need to know and ensuring that they are subject to duties of confidentiality;
Procedures for dealing with data breaches (the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to your Personal Data) including notifying you where we are legally required to do so

DATA BREACHES

We will endeavour to report any unlawful Data breach of this website’s database or the databases of any of our third-party data processors to all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.

These Policies are current and last updated in August 2024. Please check back for any future changes.