​​BP Podiatry- Privacy Policy​

​

BP Podiatry is committed to protecting your personal data and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

BP Podiatry is the Data Controller for your information.

​

Information We Collect​

​

​We collect and store information necessary to provide safe and effective Podiatric care, including:

• Personal details (name, contact information, date of birth)

• Medical history and clinical records

• Appointment and payment records

• Clinical photographs or videos (e.g. gait analysis), where relevant

• Correspondence related to your care​​​​

​​

Why We Collect This Information​

​

​Your information is used to:

• Provide safe, appropriate treatment

• Maintain accurate clinical records

• Communicate with you regarding appointments and care

• Meet legal, professional, and insurance requirements

​​

Clinical Records & Digital Systems​

​

• Clinical records are stored securely using Cliniko. We may use secure tools, including AI-assisted transcription (Heidi Health), to support note-keeping; all content is clinician-reviewed for accuracy.

• Any paper forms are stored in a locked, secure cabinet until scanned into your electronic record. Once digitised, paper copies are destroyed via secure confidential shredding.

• In accordance with healthcare regulations, all clinical records (digital and scanned) are retained for a minimum of 8 years following your last treatment (or until age 25 for minors) before being securely deleted.

​​

Photography & Video​

​

​With your consent, photographs or videos may be taken for clinical purposes such as gait or postural assessment. These are stored securely within your medical record.

​

Marketing & Social Media Images​

​

​BP Podiatry may occasionally request permission to use photographs or videos for marketing or educational purposes (e.g. website or social media).

• Marketing images are only used with separate, explicit consent.

• Consent is optional and not required to receive treatment.

• Declining consent will not affect your care.

• Consent may be withdrawn at any time by contacting BP Podiatry.

​

Sharing Information​

​

​Relevant information may be shared with other healthcare professionals only when necessary to support your care, including:

• Your GP

• Other healthcare professionals

• Laboratories or manufacturers involved in bespoke devices

Your data is never sold or shared for marketing purposes.

​

Data Storage & Retention​

​

• ​Clinical records are retained for 8 years after your last appointment, or until age 25 for minors.

• Financial records are retained for 6 years in line with HMRC requirements.

​​

Your Rights​

​

​You have the right to:

• Request access to your records

• Request correction of inaccurate information

• ​​Some records cannot be deleted due to legal and professional obligations.​

​

Contact Details

​BP Podiatry

Office 7
Tondu Enterprise Centre
Bryn Road, Tondu, Bridgend

CF32 9BS

Email: info@bppodiatry.co.uk