J S Unwin Privacy Policy

Our contact details

Jason Unwin is the data controller, he can be contacted by telephone on 07985 918237 or by email on [email protected].

This privacy policy was last updated on 10 October 2023.

The type of personal information we collect

We currently collect and process the following information from patients, prospective patients and former patients:

Personal identifiers, contacts and characteristics (for example, name, contact details and date of birth).
Medical records including current and historical health information (for example, medical conditions, medication prescribed, treatment and GP contact details).
Medical notes describing treatment provided at Jason Unwin’s clinics.
Medical insurance details.
Administrative records including appointments made, attended and cancelled and associated invoices, payments and receipts for those appointments.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

You have made an enquiry via the website, by email or by phone.
You have booked an appointment via the online booking system, by email or over the phone.
You have provided information in person during your appointment(s) and on the electronic patient registration form.
You have provided details to support a reimbursement claim to a medical insurance company.

We also receive personal information indirectly, from the following sources in the following scenarios:

If you are referred by another medical practitioner or medical practice for treatment, they may share relevant personal information with us for the purpose of continuing your treatment.

We use the information that you have given us in order to:

Schedule, re-schedule or cancel appointments and send associated reminders to you.
Provide relevant medical treatment during your appointment(s).
Record treatment given at your appointment(s) and record the progress of your treatment.
Send prescribed Chinese medicine to your listed address.
Record payments.
Secure payment from your medical insurance company.
Meet the mandatory requirements of The British Acupuncture Council, the body that regulates our professional practice (for example, GP contact details).

We may use your contact information to provide essential communications; any non-essential or marketing communications will require your consent (opt-in) in order to be sent to you, your consent can be removed at any time.

We may share your information with your medical insurance company, if relevant, and will provide only the data that is necessary for the purpose of reimbursement.

We may share information with other medical professionals involved in your medical care but would only do so at your request and with your explicit consent.

Under the UK General Data Protection Regulation (UK GDPR), the lawful basis we rely on for processing this information is that we have legitimate interests, because the processing of this information is necessary for the purposes of preventative medicine, medical diagnosis and the provision of health treatment pursuant to contract with a health professional. We must also legally retain patient records (e.g. patient details, appointments, health information, diagnosis and treatment) for seven years before disposing of the records.

How we store your personal information

Your information is securely stored. All personal information and medical records are stored electronically using the encrypted electronic patient management system Cliniko (https://www.cliniko.com/policies/privacy/).

We keep patient records and associated personal data for seven years, in line with legal requirements for this type of data. After seven years, we will dispose of patient information by permanently deleting the records from our Cliniko account.

Any communication with us by email or text is not encrypted. Any relevant personal information contained within emails or texts is transferred to Cliniko on receipt. Emails and texts are deleted once no longer required and kept for no longer than 2 years.

A note on cookies

If you use our website, we will collect information, using cookies, to enhance your experience. When you first access our website you will receive a notification about this. Our cookie policy is here: https://www.generalpracticechinesemedicine.co.uk/cookie-policy

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.
Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances, but certain information cannot be erased because it must be retained for seven years for legal purposes.
Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances, except if we are processing the information to meet our legal obligations.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at [email protected] if you wish to make a request.