GENERAL DATA PROTECTION REGULATION- GDPR

All About Hands is registered with the Information Commissioners Office - ICO registration number ZA408841  

Information AAH collects and stores:
  • Name
  • Date of birth
  • Contact number
  • Address
  • Email addresses
  • Medical insurance details if appropriate
  • Personal Assistant/Secretary details if appointments are being arranged through them
  • If it is your preferred choice to have an advocate you will be asked to sign a third party agreement
  • Specialist details – if a patient is under the care of another consultant
  • Solicitor details – if relevant
  • Referral letters  – sent by a GP or Specialist Consultant
  • Investigation results relevant to the injury/condition being treated
  • Clinical letters from AAH
Who processes patient information?
Individuals who would be deemed part of a patient’s care, which could be one or more of the following:
  • All About Hands
  • Medical insurer
  • Solicitors if relevant
  • Referring medical staff
  • Administrative staff involved in every department
How do we use the information we hold about our patients?
  • If you have been referred to us by another medical professional, we may disclose details of your consultation/investigations/treatment to them where appropriate.  You can ask for some information not to be shared but this may result in the delivery of your care being less efficient.
  • We will NEVER market our services to you or pass on your information to a third party for marketing purposes.
How can you access your information?
  • Under the GDPR you have a number of rights with regard to how your personal data is handled.  You have the right to request a copy of the information that we hold for you by making a Subject Access Request. 
  • If your personal details change, or if you feel they are inaccurate in any way then please let us know, again using the details below, and we will make the appropriate corrections.
How do we keep your information safe?
  • We take protection of your information very seriously.  All information is held safely and all those involved in the processing of patient data are trained to do so in compliance with GDPR.  Where we share your information with others, we do our best to do so with trusted facilities and ensure that this done securely.
  • Your treatment notes are stored on an online secure system called WriteUpp, designed for therapists and medical professionals.
  • All documents, which include your details, will be sent via encrypted email. 
Your rights:
  • The right to withdraw your consent to our processing of your personal data at any time.  Please note, however, that we may still be entitled to process your personal data if we have a legitimate reason for doing so.
  • The right to obtain information regarding the processing of your personal data and access to the personal data we hold about you.
  • In some circumstances, the right to receive some personal data in a structured, commonly used and machine-readable format and/or request that we transmit that personal data to a third party where this is technically feasible.  Please note that this right only applies to personal data which you have provided to us.
  • The right to request that we rectify your personal data if it is inaccurate or incomplete.
  • The right to request that we erase your personal data in certain circumstances.  Please note that there may be circumstances where you ask us to erase your personal data but we are legally entitled to retain it.
  • The right to object to and the right to request that we restrict our processing of your personal data in certain circumstances. Again, there may be circumstance where you object to or ask us to restrict our processing of your personal data, but we are legally entitled to continue processing your personal data and/or to refuse that request.
  • The right to lodge a complaint with the Information Commissioner’s office if you think that any of your rights have been infringed by us.