Privacy Policy / Privacy Notice

This privacy notice applies between you (the user of this website and/or a patient, visitor, or enquirer) and Revive Health Ltd (“we”, “us”, “our”). We take your privacy seriously.

This notice explains how we collect and use personal data when you:

visit our website: https://www.revivehealthchelmsford.co.uk
contact us by phone, email, online form or social media
attend the clinic as a patient or visitor

This notice is intended to meet the transparency requirements of the UK GDPR and the Data Protection Act 2018.

1) Who we are (Data Controller)

Revive Health Ltd is the data controller for the personal data described in this notice.

Email: info@revivehealthchelmsford.co.uk
Phone: 01245 956391 / 07723 503277

2) The personal data we collect

Depending on how you interact with us, we may collect:

Identity and contact details: name, address, email, phone number, date of birth.
Appointment and account details: booking details, attendance, communications, preferences.
Health information (special category data): symptoms, medical history, assessments, treatment notes, outcomes, and information you share during consultations.
Payment and billing details: invoices, payment status, and (where relevant) insurance information. We do not store full card details if payments are handled by a third-party provider.
Website and device data: IP address, browser/device details, pages visited, and cookie data.
In-clinic interaction data: information you provide at reception or during conversations with our team, and notes needed to manage your care, booking, queries, complaints or incidents.
CCTV images: video images of people in and around the clinic premises.

 
 
3) Where we get your data from

We collect personal data:

directly from you (website forms, phone, email, in-clinic conversations, consultations)
from someone acting on your behalf (where appropriate)
from other healthcare professionals or organisations involved in your care (e.g., GP/consultant/insurer) where lawful
from our website and analytics tools
from CCTV cameras

4) How we use your data (purposes)

We use personal data to:

provide assessment and treatment, maintain clinical records, and support continuity of care
manage appointments, reminders, cancellations, and clinic administration
communicate with you about your care and booking queries
process payments, invoices, and (where applicable) insurance administration
handle complaints, incidents, safeguarding, and quality assurance
meet legal and regulatory obligations (including professional standards and record-keeping)
keep the clinic safe and secure (including CCTV)
improve our website and services (including analytics)

5) Our lawful bases for processing (UK GDPR)

We only process personal data where we have a lawful basis.

General personal data (Article 6)

We rely on one or more of the following:

Contract (Article 6(1)(b))  to provide services you request and manage appointments.
Legal obligation (Article 6(1)(c))  to comply with legal/regulatory duties.
Legitimate interests (Article 6(1)(f))  to run and protect our clinic and services (for example, security, service improvement). We balance our interests against your rights.
Consent (Article 6(1)(a))  where required (for example, certain marketing communications and some optional data sharing).

Health information (special category data) (Article 9)

Where we process health data, we rely on:

Healthcare provision (Article 9(2)(h))  for medical diagnosis, provision of health care or treatment, and management of health services.
Explicit consent (Article 9(2)(a))  where required for specific uses.

We also rely on a relevant condition under the Data Protection Act 2018.

6) In-clinic interactions and confidentiality

When you visit or contact the clinic, we may record information you provide at reception or during conversations with our team (including by phone or email), where this is needed to:

confirm your identity and contact details
manage your appointment and preferences
support your treatment and safety
follow up on queries, complaints, incidents, or safeguarding concerns

We aim to keep conversations private. Reception areas can be shared spaces; if you would prefer to discuss sensitive information in private, please tell us and we will do our best to accommodate.

7) CCTV
Where CCTV operates

CCTV operates in public areas of the clinic (for example, entrances/exits, reception, corridors and the studio). CCTV is not used in treatment rooms or toilets.

What we collect

Cameras capture video images of patients, visitors and staff in the areas covered.

Why we use CCTV

We use CCTV for:

safety and security of patients, visitors and staff
prevention and detection of crime
protecting clinic premises and property
supporting investigations of incidents, complaints or safeguarding concerns

Lawful basis

Our lawful basis for CCTV is legitimate interests (Article 6(1)(f)) in maintaining a safe and secure environment. Where required, we carry out and maintain a legitimate interests assessment (LIA).

How we manage CCTV

clear signage is displayed where CCTV is in operation
access to recordings is restricted to authorised staff/contractors
recordings are retained for a limited period and then securely deleted, unless needed for an active investigation or legal claim
CCTV is not used for routine monitoring of staff performance

Sharing CCTV footage

We may share CCTV footage with the police or other law enforcement bodies, insurers, professional advisers, and relevant service providers where lawful and necessary.

8) Who we share your data with

We may share personal data with:

clinical/practice management system providers (as processors)
other healthcare professionals involved in your care
insurers (where you use private insurance) and payment providers
regulators and professional bodies where required
IT and communications providers (website hosting, analytics, email/telephony) acting as processors
professional advisers (accountants, solicitors) where necessary

We only share what is necessary and we have contracts in place where required.

9) Cookies and analytics

We use cookies to make our site work and (where enabled) to understand how the website is used.

Necessary cookies: required for core functionality such as security, network management and accessibility.
Analytics cookies: help us understand how visitors use the site. Where required, we will ask for your consent.

You can manage cookie preferences using the cookie controls on our website and/or your browser settings.

10) International transfers

We aim to keep your data in the UK. If any supplier transfers personal data outside the UK, we will ensure appropriate safeguards are in place (for example, UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to EU Standard Contractual Clauses).

11) How long we keep your data

We keep personal data only as long as necessary for the purposes described.

Clinical records: retained in line with applicable healthcare record retention guidance and our professional/regulatory obligations.
Financial records: retained as required by tax/accounting rules.
CCTV: retained for a limited period and then deleted unless required for an investigation or legal claim.

You can request our retention schedule by contacting us.

12) Your rights

You have rights under data protection law, including:

Access; request a copy of your personal data
Rectification; correct inaccurate or incomplete data
Erasure; request deletion in certain circumstances
Restriction; request we limit how we use your data
Objection; object to processing based on legitimate interests or for direct marketing
data portability; receive certain data in a structured, commonly used format
withdraw consent; where we rely on consent, you can withdraw it at any time

Some rights are not absolute and may depend on why we process your data.

13) How to contact us or complain

To exercise your rights or ask questions, contact us at info@revivehealthchelmsford.co.uk.

If you are unhappy with how we handle your data, please contact us first so we can try to resolve it.

You also have the right to complain to the Information Commissioners Office (ICO):

Website: https://www.ico.org.uk
Helpline: 0303 123 1113

14) Changes to this privacy notice

We may update this notice from time to time. The latest version will be available on our website.

Privacy policy

This privacy policy applies between you, the User of this Website and Revive Health Chelmsford, the owner and provider of this Website. Revive Health Chelmsford takes the privacy of your information very seriously. This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of the Website. Please read this privacy policy carefully.

Definitions and interpretation

In this privacy policy, the following definitions are used:

Data: collectively all information that you submit to Revive Health Chelmsford via the Website. This definition incorporates, where applicable, the definitions provided in the Data Protection Act 1998;

We or us: Revive Health Chelmsford

User or you: any third party that accesses the Website and is not either (i) employed by Revive Health Chelmsford and acting in the course of their employment or (ii) engaged as a consultant or otherwise providing services to Revive Health Chelmsford and accessing the Website in connection with the provision of such services; and

Website: the website that you are currently using, https://www.revivehealthchelmsford.co.uk, and any sub-domains of this site unless expressly excluded by their own terms and conditions.

In this privacy policy, unless the context requires a different interpretation:

• the singular includes the plural and vice versa;
• references to sub-clauses, clauses, schedules or appendices are to sub-clauses, clauses, schedules or appendices of this privacy policy;
• a reference to a person includes firms, companies, government entities, trusts and partnerships;
• "including" is understood to mean "including without limitation";
• reference to any statutory provision includes any modification or amendment of it;
• the headings and sub-headings do not form part of this privacy policy.

Scope of this privacy policy

This privacy policy applies only to the actions of Revive Health Chelmsford and Users with respect to this Website. It does not extend to any websites that can be accessed from this Website including, but not limited to, any links we may provide to social media websites.

Data collected

We may collect the following Data, which includes personal Data, from you:

• Name
• Contact Information such as email addresses and telephone numbers;
• IP address (automatically collected);

in each case, in accordance with this privacy policy.

Our use of cookies

Necessary cookies

We use necessary cookies to make our site work and enable core functionality such as security, network management, and accessibility. You may disable these by changing your browser settings, but this may affect how the website functions.

Analytical cookies

We may choose to use analytical cookies to help us provide you with the best possible experience by collecting and reporting information on how the website is used. The cookies collect information in a way that does not directly identify anyone. If you prefer not to allow us to accept these cookies you can adjust permissions by clicking the cookie symbol at the bottom lefy corner of this page.

 

Our use of Data

 

For purposes of the Data Protection Act 1998, Revive Health Chelmsford is the "data controller".

We will retain any Data you submit for an unlimited period.

Unless we are obliged or permitted by law to do so, and subject to any third party disclosures specifically set out in this policy, your Data will not be disclosed to third parties. This our affiliates and / or other companies within our group.

All personal Data is stored securely in accordance with the principles of the Data Protection Act 1998. For more details on security see the clause below (Security).

Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:

• internal record keeping;
• transmission by email of promotional materials that may be of interest to you;

in each case, in accordance with this privacy policy.

Third party websites and services

Revive Health Chelmsford may, from time to time, employ the services of other parties for dealing with certain processes necessary for the operation of the Website. The providers of such services have access to certain personal Data provided by Users of this Website.

Links to other websites

This Website may, from time to time, provide links to other websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites. You are advised to read the privacy policy or statement of other websites prior to using them.

Changes of business ownership and control

1. Revive Health Chelmsford may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Revive Health Chelmsford. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this privacy policy, be permitted to use the Data for the purposes for which it was originally supplied to us.

We may also disclose Data to a prospective purchaser of our business or any part of it.

In the above instances, we will take steps with the aim of ensuring your privacy is protected.

Controlling use of your Data

Wherever you are required to submit Data, you will be given options to restrict our use of that Data. This may include the following:

• use of Data for direct marketing purposes;
• sharing Data with third parties.

Functionality of the Website

To use all features and functions available on the Website, you may be required to submit certain Data.

Accessing your own Data

You have the right to ask for a copy of any of your personal Data held by Revive Health Chelmsford where such Data is held.

Security

Data security is of great importance to Revive Health Chelmsford and to protect your Data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure Data collected via this Website.

If password access is required for certain parts of the Website, you are responsible for keeping this password confidential.

We endeavour to do our best to protect your personal Data. However, transmission of information over the internet is not entirely secure and is done at your own risk. We cannot ensure the security of your Data transmitted to the Website.

Transfers outside the European Economic Area

Data which we collect from you may be stored and processed in and transferred to countries outside of the European Economic Area (EEA). For example, this could occur if our servers are located in a country outside the EEA or one of our service providers is situated in a country outside the EEA. These countries may not have data protection laws equivalent to those in force in the EEA.

If we transfer Data outside the EEA in this way, we will take steps with the aim of ensuring that your privacy rights continue to be protected as outlined in this privacy policy. You expressly agree to such transfers of Data.

General

You may not transfer any of your rights under this privacy policy to any other person. We may transfer our rights under this privacy policy where we reasonably believe your rights will not be affected.

If any court or competent authority finds that any provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted, and the validity and enforceability of the other provisions of this privacy policy will not be affected.

Unless otherwise agreed, no delay, act or omission by a party in exercising any right or remedy will be deemed a waiver of that, or any other, right or remedy.

This Agreement will be governed by and interpreted according to the law of England and Wales. All disputes arising under the Agreement will be subject to the exclusive jurisdiction of the English and Welsh courts.

Changes to this privacy policy

Revive Health Chelmsford reserves the right to change this privacy policy as we may deem necessary from time to time or as may be required by law. Any changes will be immediately posted on the Website and you are deemed to have accepted the terms of the privacy policy on your first use of the Website following the alterations.

You may contact Revive Health Chelmsford by email at info@revivehealthchelmsford.co.uk.

First published on Tue 30 11 2021