Privacy Policy

1. Privacy Policy

Simone's Foot Care Privacy Policy

Last Updated: 14.11.2025

1. Introduction
Welcome to Simone's Foot Care. This privacy policy explains how we collect, use, and protect your personal information, especially data concerning your health. We are committed to protecting your privacy and handling your information responsibly in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are
Simone's Foot Care
07387191300
info@simonesfootcare.co.uk

3. The Information We Collect
We collect personal data to provide you with the best possible foot health care. This may include:

• Contact Details: Name, date of birth, address, phone number, email address.
• Health and Medical Information: General health information, medical history, treatment plans and consent forms, clinical records, notes of conversations regarding your treatment, and correspondence with other health professionals (e.g., your GP).
• Website Usage Data: Details of your visits to our website, including your IP address (see Section 4 for cookies).
• Financial Details: Records of fees charged and payments made.

4. How We Use Your Information (Lawful Bases for Processing)
We only process your data where we have a lawful basis to do so under UK GDPR.

• For Direct Healthcare: Processing health data is necessary for the purposes of preventative or occupational medicine, medical diagnosis, the provision of health or social care, or treatment. This is our primary basis for processing clinical records.
• Legal Obligation: We have a legal requirement to maintain medical notes for a mandatory period (a minimum of 8 years for adults, and until the patient's 25th birthday for children).
• Contract: To provide you with services you have booked (e.g., appointment administration).
• Legitimate Interests: For running our organisation efficiently, such as internal audits, accounting, and securing our website.
• Consent: We will seek your explicit consent for any processing not directly related to your care, such as marketing communications or sharing information with researchers. You can withdraw this consent at any time.

5. Sharing Your Information
Your treatment information is typically accessed only by practitioners within our practice. We will not share your personal health data with third parties (like your GP or other specialists) without your explicit permission, unless legally required to do so. We may use third-party service providers (e.g., website hosting, payment processors) who process data on our behalf under contract, in line with UK GDPR standards.

6. Data Retention
We retain your personal information for as long as necessary to provide services and comply with our legal and professional obligations.

• Clinical Records: Minimum of 8 years after the last appointment for adults; until the age of 25 for children.
• Financial Records: Minimum of 6 years to comply with tax legislation.

7. Your Rights
Under data protection law, you have several rights regarding your personal information:

• Right of Access: You can request a copy of the information we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete information.
• Right to Erasure: You can ask us to delete your data, though this right may be limited by our legal obligation to retain medical records.
• Right to Restrict Processing/Object: You can ask us to suspend processing your data in certain circumstances.
• Right to Data Portability: You have the right to request your data be transferred to another data controller.

8. Cookies
Our website uses cookies to function properly and to collect limited usage data (if you consent via a cookie banner). You can manage your cookie preferences in your browser settings.

9. Security
We employ technical and organisational measures to protect your personal data, including secure servers and access controls, though no method is 100% secure.

10. How to Complain
If you have concerns about our use of your personal information, please contact us first. If you remain unhappy with our response, you have the right to lodge a complaint with the UK supervisory authority: the Information Commissioner's Office (ICO).