​

This Privacy Policy explains how and when I collect, use, and share personal information when you contact me, use my services, or purchase products from my business. This policy is provided in accordance with the General Data Protection Regulation (GDPR) 2018.

Information I Collect

In order to provide treatment or process purchases through my business, you may provide certain personal information. This may include your name, email address, postal address, medical information, and payment details.

Your information will be stored securely on an electronic patient record and diary system which is fully password protected.

Why I Need Your Information and How It Is Used

I rely on several legal bases to collect, use, and share your personal information, including:

• Provision of healthcare: Where it is necessary for the delivery of healthcare services. This includes using your information to carry out podiatry assessments, provide treatment, and offer customer support.

• Consent: Where you have given your clear consent, which you may withdraw at any time. For example, when signing up to receive updates or marketing communications.

• Legal obligations: Where it is necessary to comply with legal requirements, such as maintaining records for tax purposes or responding to court orders or legal claims.

Marketing

Occasionally, I may wish to send you marketing information relating to product offers, new services, or changes to pricing.

If you are happy to receive this information, please indicate your preferred method of contact:

• Mail

• Email

• Text Message

• Telephone

• No Marketing Communications

Information Sharing and Disclosure

Protecting the confidentiality of patient and customer information is extremely important to my business. Personal information will only be shared in limited circumstances, including:

• Medical professionals: With your consent, information may be shared with relevant healthcare professionals such as your GP, NHS Podiatry, NHS Dermatology services, or consultants to ensure continuity of care.

• Service providers: I may engage trusted third parties, such as podiatry associates, who provide services on my behalf. Personal information will only be shared to the extent necessary for them to perform these services.

• Business transfers: If my business is sold or merged, your information may be disclosed as part of that transaction, but only where legally permitted and with your knowledge.

• Legal compliance: I may collect, use, retain, or disclose information where required to comply with legal or regulatory obligations.

Data Retention

Your personal information will only be kept for as long as necessary to provide services and to comply with legal and regulatory obligations.

• Podiatry records are normally retained for a minimum of 8 years following your last appointment.

• For customers who purchase products but are not patients, personal data will be retained for a minimum of 6 years in accordance with tax legislation.

Your Rights

Under data protection law, you have several rights regarding your personal information. While some rights apply generally, others apply only in certain circumstances.

These rights include:

• Access: You have the right to request access to the personal information I hold about you and to receive a copy of that information.

• Correction, restriction, or deletion: You may request that your information is corrected, restricted, or deleted. However, health records are normally exempt from deletion or alteration requests.

• Objection: You may object to the processing of your information where it is based on legitimate interests, or object to receiving marketing communications after previously giving consent.

• Complaint: If you have concerns about how your information is being used, you have the right to raise a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Contact Information

For the purposes of the GDPR, I, Vicky Farress-Gregg, am the data controller responsible for your personal information.

If you have any questions or concerns regarding this Privacy Policy or the handling of your data, you can contact me at:

Email: vicky@tippytoesfootcare.com

Postal Address:
Stonehaven
West Ogwell Barton
West Ogwell
Newton Abbot
Devon
TQ12 6EW

​