Privacy and Data Use

Introduction

At Caledonia Foot Clinic we are committed to protecting your privacy and handling your personal information with care. This policy explains how we collect, use and safeguard your data in line with GDPR and UK government recommendations.

Data We Collect

We may collect the following information:

  • Personal details such as name, address, date of birth and contact numbers
  • Medical history and treatment records
  • Appointment dates, notes and outcomes
  • Billing and payment information
  • Email correspondence and feedback

How We Use Your Data

Your data is used only for the following purposes:

  • To assess, diagnose and treat your foot and lower limb conditions
  • To schedule and manage appointments
  • To process payments and send invoices
  • To send appointment reminders and clinic updates
  • To improve our services through aggregated audit and research

We do not share your personal information with third parties without your explicit consent, except where required by law.

Use of Halaxy Practice Management

We use Halaxy, a secure online practice management system, to store and manage patient records, appointment bookings and billing. Halaxy is hosted on encrypted servers and complies with data protection standards suitable for healthcare providers.

Security Measures

All digital records are protected by high-grade encryption and two-factor authentication on every user account. Physical records are stored in locked cabinets within our clinic premises. Access to your data is limited to authorised personnel only.

GDPR and Regulatory Compliance

Caledonia Foot Clinic follows the General Data Protection Regulation and guidelines issued by the Information Commissioner’s Office and NHS Digital. We:

  • Minimise data collection to what is strictly necessary
  • Retain records only for as long as required by law or professional guidelines
  • Conduct regular audits of our data handling and security
  • Provide staff training in data protection best practice

Your Rights

Under GDPR you have the right to:

  • Request access to your personal data
  • Ask for corrections to any inaccuracies
  • Request erasure of data where there is no lawful reason to retain it
  • Object to or restrict certain types of processing
  • Receive a copy of your data in a structured, machine-readable format

To exercise any of these rights, please contact us using the details below.

Contact Us

If you have questions about this policy or wish to make a data request, please email info@caledoniafootclinic.com