top of page

Privacy Policy

​

This notice describes the steps that we take to protect the personal data we collect and process about our clients. We take the protection of your privacy and confidentiality seriously. We are committed to the protection of the personal data that we collect and process about you in line with the data protection principles and requirements set out in the European Union General Data Protection Regulation 2016 (“GDPR”), and GDPR as incorporated into UK law by the European Union (Withdrawal) Act 2018 (“UK GDPR”), and the UK Data Protection Act 2018 (“DPA”).

​

This policy is effective from March 2024.

​

Contact details

This is the website of Kathryn Waller (The Bariatric Dietitian)

E-mail: kate@thebariatricdietitian.co.uk

​

Data Controller

The Data Protection Act 2018 requires organisations to register a notification with the Information Commissioner to describe the purposes for which they process personal and sensitive information. We are registered as the data controller and our registration can be viewed online in the public register at: Register of fee payers.

​

Keeping your personal information up to date

GDPR requires that the information held about you is accurate and current. We rely on our clients to inform us of all personal information collected as per below.  
​

The type of personal information we collect and process

In the context of the law and this notice, ‘process’ means collect, store, transfer, use or otherwise act on information. We currently collect and process the following information:

  • Personal identifiers, contacts and characteristics (name, date of birth, address, telephone, email address)

  • Details of other relevant clinicians involved in your care (e.g. GP, surgeon, psychologist, endocrinologist)

  • Medical History (past medical and surgical history, current problems, medications, test results, symptoms, anthropometry, weight history, mental health and wellbeing and any other clinically relevant details)

  • Social history where relevant to treatment (this may include; ethnic origin, relationship status, family, living situation, education, employment/ profession and any other clinically relevant details)

  • Financial information for the purposes of receiving payment (payments are taken only by bank transfer or via PayPal)

​

How we obtain personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

  • To verify your identify and communicate with you via telephone/ video/ email/ mail

  • To inform your treatment under our care and tailor our care to your specific needs

  • To enable us to communicate (with your prior agreement) with relevant clinicians involved in your care

  • To provide to regulatory authorities or other organizations when there is a legal obligation

  • Your information will not be shared with any third parties without your permission.


Under the UK General Data Protection Regulation (UK GDPR), the lawful bases I rely on for processing this information are: 

  1. Your consent. You are able to remove your consent at any time. You can do this by contacting kate@thebariatricdietitian.co.uk

  2. We have a legitimate interest

  3. We have a legal obligation

  4. Processing is necessary for medical diagnosis, the health care or treatment or the management of our healthcare system (Schedule 1, Part 1, paragraph 2 of DPA)

  5. Processing is necessary for legal proceedings, legal advice, related to or defending legal rights (Schedule 1, Part 3, paragraph 33 of DPA)

​

How we store your personal information 

  • Your information is securely stored in password protected files on a secure password protected cloud-based file storage platform, using a password protected computer.

  • I will keep and process your personal data only for as long as is necessary for the purposes for which it was collected in connection with you being a client under my professional care.

 

Your data protection rights

  • Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information. 

  • Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

  • Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

  • You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

  • Please contact us at kate@thebariatricdietitian.co.uk if you wish to make a request.

​

How to make a complaint

If you have any concerns about my use of your personal information, you can make a complaint to kate@thebariatricdietitian.co.uk

​

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:            

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

 

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

​

bottom of page