Introduction

This privacy policy sets out the way EarForYou processes your personal information, how the information is collected, how it is managed and protected.  EarForYou is committed to protecting the privacy of all clients and anyonewho interacts with EarForYou.

EarForYou endeavours to treat all information care. And to abide by the NMC guidelines to which the independent practitioner is bound by.
Please read this Privacy Policy carefully to understand how EarForYou processes your personal data. By providing your personal data to
EarForYou or by using the services provided inclusive of EarForYou Facebook page and website, you are accepting or consenting to the
practices in this Privacy Policy.  EarForYou may update this policy as and when required.  EarForYou fully complies with the UK Data Protection Act 2018. EarForYou also complies with all applicable clinical confidentiality guidelines of the relevant regulatory body – The Nursing and Midwifery Council as well as Information Governance training.

EarForYou use a practice management software for clinics and allied health practitioners called “Cliniko” which acts as a data processor. Cliniko fully complies with UK GDPR along with its “subprocessors,” (a number of third-party tools) who help Cliniko software stay efficient and dependable, including things like cloud-based data storage and cloud-based email
delivery systems. Cliniko has an appointed Data Protection Officer.

EarForYou

EarForYou is run as a Sole Trader Company, owned by Rachael Gurney BSc (Hons)

The information collected

EarForYou collects personal information about you to enable the independent practitioner to provide the services it is set out to do.

Information required may include:
● Name and address, date of birth, marital status, email address and telephone numbers
● Medical history and where relevant, the language you speak and occupation
● Details of any lasting power of attorney where a client is deemed not to have capacity to give consent to treatment.
● Digital images of the Tympanic Membrane and ear canal following ear wax removal.
● Details of services and treatments you may have received from me.
● Reports or notes on your health or any treatment and care you have received or need.
● Patient feedback and treatment outcome information, you provide.
● Information about complaints and incidents.
● Your payment information is provided when you make a payment to me.
● Information from customer surveys or promotions that you take part in.

Collection of Personal Information

EarForYou collects the personal information in the following ways:
● When you enquire about my services or treatment.
● When you provide information by filling in a form on registration or information provided at any other time.
● When you correspond with me by email, phone or other ways.
● During the provision of services to you.
● Contact by email, telephone, social media or in any other way.
● When you visit EarForYou website.
● Fill in a feedback form about the service you received.

Personal Information Provided by other Sources

EarForYou may collect personal data about you from other sources and these can include:
● From your next of kin or other family member.
● Provided by doctors, other clinicians and health care professionals, hospitals, clinics, and other health care providers.
● Translators and interpreters.
● Any health professional or organisation who provides information for the continuity of your care. 

How EarForYou use the information and why it is required

EarForYou uses the personal information to provide direct health and care services to individual clients and to meet my contractual commitments to you. This may include:
● Processing – this will include using the information to fulfil any request made by you or someone on your behalf to receive my healthcare service.
● Contract – if EarForYou have a contract with you, they will process your personal information to fulfil that contract,
● Consent – EarForYou will always ask for your consent for treatment and to store your clinical notes via “Cliniko.” EarForYou will ensure you are as fully informed as possible and use that consent solely for the procedure offered. You can withdraw your consent at any time either verbally or via written request.
● Necessary to defend legal claims or a court action.
● Information you have made public.

Legitimate interests
EarForYou will process your data when they have legitimate interest to do this and when these interests do not override your rights. These legitimate interests include: –
● Providing you with information on services and products.
● Keeping your records up to date.
● For statistical research and analysis and to enable monitoring and service improvement.
● Sharing your personal information with people or organisations to comply with any legal or regulatory obligations or to enable me to run my clinic.
● To fulfil laws that apply to me and the third parties I work with.

Who will see the information?
Your medical information and clinical records will only be accessible to EarForYou via “Cliniko.”

EarForYou will only share your personal information:
● If consent is necessary, EarForYou will have taken your consent to us doing so and will provide information for the specific reason your consent was given. You will have the opportunity to withhold consent when you complete the pre-treatment consent form.
● Your GP – where clinically necessary I may share your information with your GP. You can ask EarForYou not to do so which will be respected, unless legally required to provide the information. You should be aware it may be detrimental to your health if your GP does not have your full medical history.
● Audiologists, if EarForYou have recommended a hearing test following ear wax removal.
● Where it is necessary to protect your vital interest (i.e., your life or health) e.g., with emergency services or safeguarding teams.
● Organisations or people who by law or regulations, EarForYou must share your personal information with e.g. The Care Quality Commission (CQC) if requested by them.
● The police or other law enforcement agencies to assist them perform their duties if EarForYou must do this by law or under a court order.
● Where EarForYou use other organisations to provide services on their behalf for processing, mailing, delivering, answering patient’s questions about services, sending mail and emails, data analysis, assessment and profiling or processing credit/debit card payments.
● To organisations who you have requested EarForYou to supply information so that they can provide services or products you have requested e.g., Audiologists.
● When EarForYou is legally required to, or because of a lawful request by a governmental or law enforcement authority.

Security
The security of your personal information is very important to EarForYou. 

EarForYou protects all personal data they hold and ensure they have appropriate organisational and technical measures in place to prevent unauthorised access or unlawful processing of personal data and to prevent data being lost, destroyed, or damaged.  Unfortunately, the transmission of information via the internet is not completely secure. Although EarForYou will do their best to protect your personal data, they cannot guarantee the security of your data transmitted to my site; any transmission is at your own risk. Once EarForYou have received your information, they will use strict procedures and security
features to try to prevent unauthorised access.

Your rights
You have the following rights:
● Transparency over how EarForYou uses your personal information (right to be informed).
● To request a copy of the personal information EarForYou hold about you, which will be provided to you within one month (right of access).
● An update or amendment of the personal information held about you (right of rectification).
● To ask EarForYou to stop using personal information (right to restrict processing).
● To ask EarForYou to remove your personal information from the Cliniko database (right to be forgotten).
● Request EarForYou to remove your personal information for marketing purposes (right to object).
● To obtain and reuse your personal data for your own purposes (right to portability).
● Not to be subject to a decision based on automated processing.

You can contact EarForYou about any of these rights at the address below.

To protect your privacy, EarForYou may ask you to prove your identity before they agree to respond to any request. There is no charge for a request, and EarforYou will respond to the request within one month.

If you are not satisfied with the way in which EarForYou deals with your request, you can contact the Information Commissioner’s Office (ICO) on 0303 123 1113 or at their website www.icocasework@ico.org.uk.

Retention of information
EarForYou will hold your information only for as long as necessary.

EarForyou use the following guidelines: –
● Any time limits set by law or recommended by regulators, professional bodies or associations. I will retain all health records for a minimum of 8 years after the conclusion of treatment or death (in line with BMA recommendations for the retention of health records) bma.org.uk.
● Time limits for making a claim.
● For as long as EarForYou have a reasonable need for managing a working relationship.

How to contact EarForYou
If you have any questions about this privacy policy or your rights regarding processing your personal information, or wish to make a complaint please contact:
EarForYou
07791282322
Info@ear-wax-removal-worcestershire.co.uk