Introduction

This privacy policy explains how Sole Podiatry  (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our podiatry services. We are committed to ensuring that your privacy is protected and that we comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.


Information We Collect

We may collect and process the following types of personal data:


a. Personal Information


  • Name
  • Address
  • Phone number
  • Email address
  • Date of birth


b. Health Information (Special Category Data)


Medical history

Podiatric assessments and treatment records

GP or healthcare provider details


c. Payment Information


Transaction details (processed securely via SumUp; we do not store full card details)

How We Collect Your Data

We collect data in the following ways:


  • Directly from you during consultations, registration, or communication
  • Through our practice management system (Cliniko)
  • Via payment transactions processed through SumUp

How We Use Your Information

We process your data under the following lawful bases:


  • Contractual necessity – to provide treatment
  • Legal obligation – for healthcare and tax records
  • Legitimate interests – for practice management
  • Explicit consent – for processing health (special category) data

Data Storage and Security

  • Patient records are securely stored using Cliniko, a GDPR-compliant practice management system
  • Payment transactions are securely handled by SumUp, which uses encryption and PCI-DSS compliant systems
  • We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, or misuse

Data Sharing

    We will only share your data when necessary and appropriate, including

    • With other healthcare professionals (with your consent or where required)
    • With regulatory bodies if legally required
    • With service providers such as Cliniko and SumUp for practice operations


    We do not sell or rent your personal data to third parties.

Data Retention

We retain your records in line with professional guidelines:


  • Adult records: typically 8 years after last treatment
  • Children’s records: until age 25 (or 26 if treated at age 17)


Financial records are retained for at least 6 years for tax purposes.

Your Rights

Under UK GDPR, you have the right to:


  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (where applicable)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time (where applicable)


To exercise your rights, contact us using the details below.

Cookies and Website (if applicable)

If you use our website, cookies may be used to improve your browsing experience. You can control cookie settings through your browser.

Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):


Website: https://www.ico.org.uk

Phone: 0303 123 1113


Contact Details

Christine McCay / Sole Podiatry 

7 Dobbin Street, Ground Floor. Armagh. BT617QQ


07835574893

Updates to This Policy

We may update this privacy policy from time to time. The latest version will always be available upon request.



Consent

By using our services, you acknowledge that you have read and understood this privacy policy.