Privacy Policy

Privacy Policy

This policy will be regularly reviewed and updated when necessary.

Personal data:

Personal data is information about you that can identify you as an individual. This includes, your name, address, date of birth, email address, telephone numbers, occupation, height, weight, GP name, address and telephone number. Personal data collection is required in order for Caroline Gillies, Registered Dietitian to provide safe and accurate advice and for this advice to be communicated to you and other relevant health professionals involved in your care. 

Once an appointment has been arranged, you will be required to provide personal data for Caroline Gillies, Registered Dietitian to make an informed decision about the advice you require, enable her to make a diagnosis and provide the support needed. If you refuse to provide the information requested or you wish to withdraw your consent, Caroline Gillies will not be able to provide the advice you require. 

Who is the data controller:

Caroline Gillies, Registered Dietitian, The Witney Health Professional Centre,Suite 1, Bridge Street Mills, Witney, OX28 1FX. Tel. 07751746949. dietitian@carolinegillies.co.uk. She is registered as Data Controller with the Information, Controllers Office (ICO).

How long will my data be kept?:

In order to comply with the British Dietetic Association, patient notes which contain your personal data will be kept securely for ten years (or for children, ten years after their 18th birthday). 

If you contact Caroline Gillies, Registered Dietitian but do not arrange an appointment, your contact details will be kept for no longer than one year following your last correspondence or until you request your details be deleted. Caroline Gillies will not distribute, sell or lease personal information to third parties unless she has your strict permission or is required by law to do so. 

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Security

Secure physical and electronic procedures are in place to safeguard your information. Your personal data will not be shared with any other parties without your consent.

Once an appointment has been arranged, you will be asked to complete a medical history form to provide initial information prior to the consultation. This can be brought with you to the consultation or emailed to Caroline Gillies beforehand. You will also be asked to provide consent for:

Caroline Gillies to securely store your personal data, write to your GP, Consultant and/or Health Visitor following the consultation and contact you by telephone or email to gather or provide further information between appointments or to arrange follow up. 

If your data is required for a new purpose, the changes will be communicated to you before beginning any new processing. 

HTTPS

To authenticate the identity of this website and protect the privacy and integrity of all data while in transit, this website is encrypted using the latest Transport Layer Security (TLS 1.2). You can see this from the padlock symbol shown in your browser.

Server Logs

As with all websites, log files are maintained and analysed of all requests for files on this website’s servers. Log files do not capture personal information but do record your IP address, browser type and version, the website through which you reached us (Referrer URL), the pages you visit and the date & time of those visits.

No attempt will be made to track or identify individual users unless we have a reason to suspect that a user is attempting to gain unauthorised access. We reserve the right to attempt to identify and track any individual who is reasonably suspected of trying to gain unauthorised access to this website. All log file information is kept secure and no access to raw log files is given to any third party.