Privacy policy

Who we are

Stratford Foot Clinic is a trading name of The Podiatry Works Ltd, an independent podiatry practice based at Ithaca House, 27 Romford Road, Stratford, London E15 4LJ.

The Podiatry Works Ltd is the data controller responsible for the personal information we hold about you. This means we are responsible for deciding how your information is collected and used, and for keeping it safe. We are registered with the Information Commissioner's Office (ICO) as a data controller.

The information we collect

Depending on how you interact with us, we may collect:

• Personal details, your name, date of birth, address, telephone number and email address.
• Health information, your medical history, the conditions we assess and treat, clinical notes, and details of your care. This is treated as special category data and given the highest level of protection.
• Appointment information, your bookings, cancellations and attendance.
• Payment information, a record of payments you make. Card payments are processed securely by our payment provider, Zavopay, and we do not store your full card details. Where you pay by bank transfer, payment is made directly to our business bank account.
• Correspondence, any messages you send us by phone, email or through our website contact form.

How we use your information

We use your personal information to:

• Provide and manage your podiatry care and treatment.
• Arrange appointments and communicate with you about them.
• Keep accurate and up-to-date clinical records.
• Take payment for our services.
• Respond to your enquiries, comments or complaints.
• Meet our legal, regulatory and professional obligations.

Under the UK GDPR, our lawful bases for processing your information are the performance of our contract with you, compliance with our legal obligations, and our legitimate interests in running the practice safely and effectively. As health information is special category data, we also process it on the basis of the provision of health care and treatment, under Article 9(2)(h) of the UK GDPR.

Sharing your information

We treat your information as strictly confidential and only share it where it is necessary or required. We may share your information with:

• Your GP or other healthcare professionals involved in your care, where appropriate and with your knowledge.
• Trusted service providers who help us run the practice, such as our clinical record and booking system (Cliniko) and our payment provider (Zavopay), all of whom are required to protect your data and use it only as instructed.
• Regulatory, professional or legal bodies, where we are required to share information by law.

How long we keep your information

We keep your records only for as long as necessary to provide your care and to meet our legal and professional obligations. In line with professional retention guidance, clinical records are kept for a minimum of eight years after your most recent appointment. Records relating to patients under the age of 18 are kept until their 25th birthday.

Keeping your information secure

We take the security of your information seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss or misuse. Electronic records are held on secure, access-controlled systems, and any paper records are stored securely.

Your rights

Under data protection law, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your information, where there is no legal reason for us to keep it.
• Restrict or object to how we use your information.
• Request a copy of your information in a portable format.

To exercise any of these rights, please contact us using the details below. We will respond within one month. Please note that, because we are required to retain clinical records for a set period, we may not always be able to delete health information on request.

Cookies

Our website uses only the essential cookies needed for it to work properly. Some pages include content from third parties, such as embedded maps, which may set their own cookies. You can control or disable cookies at any time through your browser settings.

Changes to this policy

We may update this policy from time to time. The most current version will always be available on this page, with the date it was last reviewed shown at the top.

How to contact us

If you have any questions about this policy, or you'd like to exercise any of your rights, please get in touch:

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection, at ico.org.uk.