GDPR Statement for Caroline Whittome Soft Tissue Therapy Ltd

​

Caroline Whittome Soft Tissue Therapy Ltd is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. As part of our clinical practice, we collect, store, and process health data, which is classified as “special category personal data” under data protection law.

​

We collect health data and other personal information when you interact with us, such as when you book appointments, provide medical history, or communicate with us regarding your care. This information is used solely for the purposes of providing safe and effective therapy services, fulfilling our legal and contractual obligations, and ensuring the highest standards of client care.

​

Your health data is handled with the utmost confidentiality and is protected by robust security measures, including password-protected systems and secure storage of hard copy records. Electronic records may be stored on third-party applications that provide secure data management services. We ensure that any third-party providers we use comply with UK GDPR requirements and have appropriate safeguards in place to protect your information.

​

We may use your personal data to:

​

• Send you communications about your appointments, services, and updates relevant to your care.

• Request feedback and invite you to participate in surveys to help us improve our services.

• Send you promotional material about services, offers, or events that may be of interest to you.

• Correspond with you for the purpose of requesting a public review of our services.

• Contact you about the possibility of being the subject of a case study, always seeking your explicit consent before any case study is published or shared.

• ​

You are free to opt out of receiving promotional material, feedback requests, surveys, or requests for public reviews or case study participation at any time by contacting us.

​

We retain your data only as long as necessary to comply with legal requirements, according to the following retention periods:

​

• General records: 8 years after the conclusion of treatment

• Oncology-related records: 30 years

• Children’s records: Until the patient’s 25th birthday

​

After these periods, your data will be securely deleted or anonymised unless you provide further consent or there is a contractual need to retain it.

​

We will only share your health data with trusted third parties when necessary for your care, legal compliance, or with your explicit consent. You have the right to access, correct, or request deletion of your health data at any time, and to withdraw consent for its use where applicable.

​

If you have any questions about how your health data is used, or wish to exercise your rights under the UK GDPR, please contact our Data Protection Officer at info@carolinewhittome.com or write to us at 5 Dikler Close, Bourton on the Water, Gloucestershire GL54 2PS.