Privacy Policy

 

Effective Date: 6 September 2023

 

1. Introduction

 

Welcome to Joint Works.  We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information not only in accordance with applicable data protection laws in the United Kingdom but also the ethical and confidentiality codes set out by the Health Care Professions Council (HCPC) and Chartered Society of Physiotherapy (CSP).

 

2. Information We Collect

 

We may collect various types of personal information, including but not limited to:

 

    •    Name

    •    Contact information (e.g., address, email, phone number)

    •    Health information and medical history

    •    Treatment records and progress notes

    •    Employment and Workplace information

    •    Any other information relevant to the provision of Occupational Health, Physiotherapy and Ergonomics

 

 

3. How We Use Your Information

 

We use your personal information for the following purposes:

    •    Providing occupational health assessments and services

    •    Providing and evaluating physiotherapy assessments and services

    •    Maintaining health records

    •    Communicating with employees and employers about appointment times, outcomes, and other relevant information

    •    Audit and quality assurance

    •    Legal and regulatory compliance

The lawful basis within the UK GDPR  we utilise is Article 9 (2) (h): processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems or services.

​

4. Sharing Your Information

 

Under the English common law of confidentiality, we will always request the employee’s consent prior to sharing information with the employer. The information that may be shared with the employer would be in the context of the employee’s appointment attendance and how their health relates to their fitness for work.

All reports would be sent to the employee at the same time unless they have chosen to see it first to check for factual accuracy within the next 2 working days.

If an employee requests to see the report in advance it will automatically be sent to the employer after 3 working days unless the employee indicates that they wish to withdraw consent.

If the employee chooses to withdraw consent, then the employer may have to make management decisions based on the information available to them.

 

In exceptional circumstances data may be shared with legal and regulatory authorities when required by law, for example in safety critical roles where public safety is at risk.

 

5. Data Security

 

We take reasonable measures to protect your personal information from unauthorised access or disclosure. This includes secure storage and transmission of data.  We use TM3 for electronic clinical records and diary management and TM3 data is stored in ISO27001 accredited, secure and monitored datacentres.

 

6. Your Rights

You have the right to expect a standard of care that meets the ethical and confidentiality codes as set out by the Health Care Professions Council (HCPC) and Chartered Society of Physiotherapy (CSP) and the legal requirements of  the UK Common Law of Confidentiality and UK GDPR.

 

You have the right to withdraw consent to Occupational Health Physiotherapy at any time.

You have the right to access your personal information.

Please contact us if you wish to exercise these rights.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We try to respond to all legitimate requests within one month.

Medical records will be retained for 8 years after which they will be destroyed.

​

7. Cookies and Tracking Technologies

 

We may use cookies and similar technologies on our website for analytical and functional purposes. You can manage your cookie preferences through your browser settings.

 

8. Changes to this Privacy Policy

 

We may update this Privacy Policy from time to time. Please review it periodically for any changes.

 

9. Contact Us

 

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact  angela.webster@jointworks.uk