INNOVATIVE HEALTH LTD
In addition to the General Data Protection Regulation (GDPR) requirements, the British Psychological Society (BPS) Code of Ethics and Conduct and the Health and Care Professions Council (HCPC) Standards of Conduct, Performance and Ethics may further protect your information.
The type of information we collect
This will vary depending on the service you have purchased and may include:
- Name, contact details (eg. address, email and telephone number)
- Other personal identifiers, as relevant (eg. date of birth, ethnicity, place of work, job title)
- Information about the treatment provided and referral information shared by the referrer, eg. when using therapeutic services
- GP details/other medical professional details involved in your care, eg. psychiatrist, when using therapeutic services,
- Notes from treatment sessions
- Service we provide to you and method of payment
- Pre and post assessment following training
- Formal communications related to the service purchased, eg. emails
How we use your information
This depends on the service you have purchased and may include using the information in the processing of healthcare insurance claims, to update healthcare professionals involved in your care, to remind you of your appointment/of certain tasks agreed in therapy sessions, analysing pre and post training assessments/analysing feedback following attendance at workshops (internal use for improving services/service development) and to send information to people who sign up to our mailing list.
Lawful basis of processing
Our basis of processing your information is for legitimate interests and with your consent. This is information that both you and Innovative Health might reasonably expect to be provided and maintained in order to provide the service or information you require. In the case of our email list you will have volunteered that information for the purposes stated on our sign-up form and you always have the right to end the processing. You may have also provided this information when meeting in person, at a conference of business meeting.
It is information that we both would reasonably expect to be shared between us with a clear understanding of how it will be used and protected.
Recipients of Data
Data will be used only within our partnership for the purposes you and Innovative Health reasonably expect for the services being provided. Your data will not be shared with third parties unless we are required to by law, or in the event of serious personal risk to self or others, eg. risk of suicide or to prevent a serious crime.
How we store your information
Your information is securely stored, eg. using cloud-based software and spreadsheets, which have effective password protected/personal logins and accessed via effective password protected electronic devices with personal logins, including laptops and tablet computers. Paper records are kept to a minimum and are stored in a lockable cabinet in a locked room.
We will not keep your personal data for longer than is necessary for the purposes for which it is being processed.
HMRC financial records and clinical patient/client records must be kept for 7 years.
We will then dispose of your information, which may involve using secure deletion software or by secure shredding.
Your data rights
You have the following rights under GDPR about how your data is used by us, including:-
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the the right to object to the processing of your personal data in certain circumstances.
- Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You can exercise your rights at any time by contacting us. If you consented to us collecting and/or processing your personal information but change your mind, you can contact us to request that we erase the personal information that we hold about you. This does not include data we are obliged to keep for administrative, legal and security purposes.
If you wish to make a request to access your personal data, or if you have any questions or concerns regarding any aspect of this policy, please contact us at firstname.lastname@example.org
How to complain
If you have a complaint you can contact Innovative Health (as above) so that we can try to resolve it for you. You can also complain to the Information Commissioner’s Office (ICO) online at https://ico.org.uk/ or by telephone on 0303 123 1113 or to the Health and Care Professions Council (HCPC) at