We at Fourward Health are “controllers” of the information which we collect from or about you – “Personal Data”. As controllers, we are responsible for the security and processing of your Personal Data. This Privacy Notice explains why and how we process your data.
The word ‘process’ covers most things that can be done with personal data, including collection, storage and destruction of that data.
Fourward Health is a sole trader company.
Address | 25 Youldon Way, Horrabridge, Yelverton PL20 7SN, United Kingdom
Email | firstname.lastname@example.org
Our Data Protection Officer (DPO) is Ms Kerry Ward who you can contact at the above registered address or through email@example.com if you have any queries about this notice or anything related to data protection.
You have certain rights in relation to your personal data including the right to object to processing of your data in certain circumstances. All of these rights are set out in Section 12 of this privacy notice.
2. Your Personal Data
‘Personal data’ is any information that relates to a living, identifiable person. This data can include your name, contact details, and other information we gather as part of our relationship with you.
It can also include ‘special categories’ of data, which is information about a person’s race or ethnic origin, religious, political or other beliefs, physical or mental health, trade union membership, genetic or biometric data, sex life or sexual orientation. The collection and use of these types of data is subject to strict controls. Similarly, information about criminal convictions and offences is also limited in the way it can be processed.
We are committed to protecting your personal data, whether it falls into ‘special categories’ or not, and we only process data if we need to for a specific purpose, as explained below.
We collect your personal data mostly through our contact with you, and the data is usually provided by you, but in some instances we may receive data about you from other people/organisations. We will explain when this might happen in this Notice.
3. Personal Data Description, Processing Reason And Our Legal Basis For Processing
Consequence of not providing the above data: Fourward Health will be unable to enter into a contract with you for the provision of treatments or services.
You may withdraw your consent to the processing of the personal data in this section at any time. Please contact the Fourward Health Privacy Officer to do so.
Essential Cookies: For the full functional use of our websites we use essential cookies to record the user's permission (if given) to allow cookies
Performance Cookies: For Web statistic analysis – to track usage patterns and deliver customised content to our users through Google Analytics and Hotjar.
5. Data Received By Third Parties
Where we receive such personal data as set out above, the planned processing and legal condition or basis for processing will be as set out above. We shall also within a reasonable time period after obtaining the personal data, but at the latest within one month, notify you from which source the data originates, and whether it came from a publicly accessible source. One received, all other provisions of this privacy notice will also apply to this received personal data.
6. With Whom We May Share Your Data
7. Transfer Of Data Outside Of The UK – Statement
Fourward Health does not share or transfer any health-related customer visitor or supplier personal data outside of the EEA. However, our external marketing contractor works outside of the EU, and only has access to a client’s first name, last name, email address, date of birth, phone number and treatments/treatment packages undertaken. This personal data remains in control by Fourward Health and will not be used in any other purpose other than to provide consenting Fourward Health clients with email monthly newsletters and email birthday discounts.
Fourward Health will not share, disclose or transfer your personal data outside the EEA without ensuring the relevant contract includes the standard data protection clauses adopted by the European Commission; in this way, Fourward Health is providing adequate safeguards for the transfer of this data outside of the EEA.
8. How We Store Your Data
9. Data Retention
Data is processed and stored only as long as it is needed for the purpose for which it was collected, subject to the following overriding principles:
Where legal obligations require us to keep the information for longer or for a specified period;
Until the expiry of any limitation period in relation to potential claims against Fourward Health;
Until the expiry of a reasonable period of time in relation to potential complaints or claims against Fourward Health.
Fourward Health is obligated to keep data only for as long as it is needed, as well as all statutory or other legal obligations regarding the retention of such records in accordance to GDPR policy.
10. Rights of Data Subject
You have the following rights in respect of your data:
11. Withdrawing Consent
For personal data, where we are relying upon your consent as the legal basis for processing (please refer to S3 above), you may withdraw your consent at any time by altering your preferences by clicking ‘Unsubscribe’ at the bottom of any Fourward Health email or by notifying us at firstname.lastname@example.org.
12. Making A Complaint
If you feel you have a complaint regarding the processing of your personal data, please contact the Data Protection Officer at email@example.com.
13. How To Contact Fourward Health’s Data Protection Officer
If you wish to contact Fourward Health’s Data Protection Officer, please write to the address or the email at the top of this privacy notice.
14. If You Still Have A Concern Regarding Your Personal Data
You may report your concern to the Information Commissioner’s Office – contact details may be found on the ICO website https://ico.org.uk/for-organisations