Privacy Policy

At The Green Parrot Clinic, we are committed to protecting your privacy and personal information. This policy explains how we collect, use, and safeguard your data in accordance with UK GDPR and Data Protection Act 2018.
Last updated: August 2025

Privacy Summary

What we collect: Contact details and if you use our website, website usage data, necessary for arranging appointments.

Why we collect it: To manage appointments.

Who we share with: Our Healthcare practitioners.

Your rights: To access, correct, detete, restrict, your data or to withdraw consent at any time.

How long we keep it: For 2 years or longer if you continue to use our services.

Data Controller

The Green Parrot Clinic is the data controller for your personal information under UK GDPR. We determine how and why your personal data is processed.

The Green Parrot Clinic
Montpelier House, 89 Market Place, Swaffham, Norfolk PE37 7AQ

Information We Collect

Personal Information (collected by practitioners)

  • Full name, date of birth, and gender
  • Contact details (address, phone, email)
  • Emergency contact information
  • GP details and referral information

Website Information

  • Contact form submissions
  • Online appointment bookings
  • Email correspondence
  • Website usage analytics (anonymised)

How We Use Your Information

Healthcare Services

  • Providing treatment and therapeutic care
  • Managing and coordinating appointments
  • Maintaining accurate medical records
  • Monitoring treatment progress and outcomes
  • Communicating about your treatment
  • Referring to other healthcare professionals

Administrative Purposes

  • Processing payments and billing
  • Responding to enquiries and complaints
  • Managing clinic operations
  • Quality assurance and clinical audit
  • Legal compliance and regulatory requirements

Sharing Your Information

We only share your information when necessary for your care or when legally required. We may share your information with:

Healthcare Professionals

  • Other practitioners within our clinic team
  • Your GP or referring healthcare professional (with consent)
  • Specialists for referrals and consultations
  • Healthcare assistants and reception staff (on a need-to-know basis)

Regulatory and Legal Bodies

  • Professional regulatory bodies (HCPC, GOsC, etc.)
  • Care Quality Commission (CQC)
  • Courts and legal authorities (when legally required)
  • Safeguarding authorities (child/adult protection)

Important:

We never sell your information to third parties for marketing purposes. All data sharing is governed by strict confidentiality agreements and professional obligations.

Data Security

We implement comprehensive security measures to protect your personal information:

Technical Measures

  • SSL encryption for data transmission
  • Secure cloud storage with encryption
  • Regular software updates and security patches
  • Firewall protection and intrusion detection
  • Secure backup systems

Organisational Measures

  • Regular data protection training
  • Access controls and role-based permissions
  • Clear desk and screen policies

Data Retention

We retain your information only as long as necessary for healthcare provision and legal compliance:

Medical Records (managed by you inidividual therapist)

8 years after last treatment

Required by professional guidelines

Financial Records

7 years from transaction

HMRC requirements

Contact Enquiries

2 years from last contact

Administrative purposes

Website Analytics

26 months (anonymized)

Google Analytics default

Your Rights Under UK GDPR

You have the following rights regarding your personal information:

Right of Access

Request a copy of your personal information and details about how it's processed.

Right to Rectification

Ask us to correct inaccurate or incomplete personal information.

Right to Erasure

Request deletion of your personal information (subject to legal and professional obligations).

Right to Restrict Processing

Ask us to limit how we use your information while disputes are resolved.

Right to Data Portability

Receive your personal information in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent for specific processing activities at any time.

Rights Related to Automated Processing

Protection against automated decision-making (not currently applicable to our services).

Exercising Your Rights:

To exercise any of these rights, contact us using the details in the 'Contact Us' section. We will respond within one month.

Note: Some rights may be limited where we have overriding legal obligations, such as maintaining medical records for professional and regulatory requirements.

Contact Us

For any questions about this privacy policy or to exercise your rights, please contact us:

General Enquiries

Address:
The Green Parrot Clinic
Montpelier House, 89 Market Place
Swaffham, Norfolk PE37 7AQ

Data Protection Enquiries

Data Protection Officer: Practice Manager
Please mark enquiries "Data Protection" for faster processing

Response Times

General enquiries
2 working days
Data subject requests
1 month
Urgent concerns
Same day

Making a Complaint

If you're not satisfied with how we've handled your personal information, you can:

1. Contact Us First

We encourage you to contact us directly so we can try to resolve your concerns quickly and effectively.

2. Information Commissioner's Office (ICO)

If you remain unsatisfied, you can lodge a complaint with the UK's data protection regulator:

Online
Website: ico.org.uk
Use their online complaint form
Phone & Post
Phone: 0303 123 1113
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF