Privacy Policy

At HACT (Health and Care Today Pvt Ltd), we are dedicated to providing safe, effective, and high-quality care. We continually seek ways to improve your experience with our services.

 

If you would like to share feedback, whether it’s a comment, complaint or compliment, please don’t hesitate to contact us. You can reach our main office by email at admin@healthandcaretoday.com or by phone at 07308400901 or 03332244922. We are a company that values our patients, and all complaints are taken seriously and thoroughly investigated. Positive experiences are always welcome too.

 

We are committed to fostering a supportive and fair environment for our staff. We encourage openness and honesty, promoting a culture where concerns can be raised without fear or blame. This helps us address any issues and continually improve our service.

 

At HACT we prioritize reducing risk through good professional practice and adherence to policies, procedures, and relevant legislation. Our aim is to create a safe and transparent environment for both our staff and patients.

 

For further information about our policies, or if you need specific guidance, please contact our main office. If we cannot assist directly, we will gladly connect you with the appropriate team member.

 

Privacy Policy of HACT (Health and Care Today Pvt Ltd):

 

Effective Date: 12/06/2025

 

HACT (Health and Care Today Pvt Ltd) (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data for patients, visitors, and job applicants in accordance with the UK GDPR and the Data Protection Act 2018.

 

  1. Privacy Policy for Patients

 

1.1 What Personal Data We Collect

 

We collect and process the following personal data from our patients:

  • Identity Information: Full name, date of birth, gender.
  • Contact Information: Address, phone number, email address.
  • Medical Information: Health records, medical history, treatment details, GP details, and any other medical-related information necessary for your physiotherapy care.
  • Payment Information: Insurance details, payment history, and billing information.

 

1.2 How We Use Your Personal Data

 

We use your personal data for the following purposes:

  • To provide physiotherapy services, including treatment plans and medical care.
  • To communicate with you regarding appointments, treatment progress, and follow-up care.
  • To maintain accurate health records in line with medical and legal requirements.
  • To process payments and insurance claims.
  • To ensure compliance with legal obligations such as health and safety regulations.

 

1.3 Legal Basis for Processing Your Data

 

We process your personal data based on the following legal grounds:

  • Consent: When you voluntarily provide your medical information.
  • Contractual necessity: To deliver physiotherapy services under a contract or terms of engagement.
  • Legal obligation: To comply with health-related laws and regulations.
  • Legitimate interests: For the purpose of improving clinic services and ensuring patient safety.

 

1.4 Data Sharing

 

We may share your personal data with:

  • Your GP, other healthcare providers, or medical specialists for coordination of care.
  • Insurance companies for payment processing.
  • Regulatory bodies if required by law (e.g., in the case of audits or legal proceedings).

 

We do not share your personal data with third parties for marketing purposes.

 

1.5 Data Retention

 

We retain your medical data for a period necessary to comply with legal, medical, and professional requirements. Typically, medical records are retained for 8 years after your last appointment, or longer if required by law.

 

1.6 Your Data Protection Rights

 

You have the following rights under the UK GDPR:

  • Access: Request access to your personal data.
  • Correction: Ask for corrections to inaccurate or incomplete data.
  • Erasure: Request deletion of your data when it is no longer needed.
  • Objection: Object to certain processing activities.
  • Portability: Request transfer of your personal data to another provider.

 

To exercise these rights, please contact us at [Insert contact information].

 

  1. Privacy Policy for Visitors

 

2.1 What Personal Data We Collect

 

For visitors to our clinic, we may collect:

  • Identity Information: Full name, ID, or visitor badge information.
  • Contact Information: Phone number or email address.
  • CCTV Footage: We use CCTV systems for security purposes, which may record your image during your visit.

 

2.2 How We Use Your Personal Data

 

We use visitor data for the following purposes:

  • To ensure the safety and security of our patients, staff, and visitors.
  • To maintain visitor logs for health and safety compliance.
  • To manage and monitor our premises for security reasons (via CCTV).

 

2.3 Legal Basis for Processing Your Data

 

  • Legitimate interest: We process visitor data for the safety and security of our clinic.
  • Legal obligation: To comply with health and safety laws.

 

2.4 Data Sharing

 

Visitor data, including CCTV footage, may be shared with law enforcement authorities if required by law or for the protection of our premises.

2.5 Data Retention

 

We retain visitor data, including CCTV footage, for 30 days, unless required for security investigations or legal reasons.

 

2.6 Your Data Protection Rights

 

You have the right to:

  • Request access to any personal data we hold about you (e.g., CCTV footage).
  • Request correction or deletion of inaccurate data.
  • Object to the processing of your personal data.

To exercise these rights, please contact us at [Insert contact information].

 

  1. Privacy Policy for Job Applicants

 

3.1 What Personal Data We Collect

 

When you apply for a job at HACT (Health and Care Today Pvt Ltd), we may collect the following data:

  • Identity Information: Full name, date of birth, national insurance number.
  • Contact Information: Phone number, email address, and home address.
  • Employment Information: CV, employment history, qualifications, references, and any additional information provided during the recruitment process.
  • Criminal Record Information: We may request Disclosure and Barring Service (DBS) checks if relevant to the position.

 

3.2 How We Use Your Personal Data

 

We use your personal data for the following purposes:

  • To assess your suitability for the role.
  • To communicate with you regarding your application status.
  • To conduct background checks, including references and DBS if applicable.
  • To comply with employment laws and regulations.

 

3.3 Legal Basis for Processing Your Data

 

We process your personal data based on:

  • Consent: When you provide personal data during the job application process.
  • Legitimate interest: For assessing your job application and maintaining records for future vacancies.
  • Legal obligation: To meet employment law requirements and regulations.

 

3.4 Data Sharing

 

We may share your personal data with:

  • Third-party service providers assisting us in recruitment (e.g., background check agencies).
  • Regulatory or legal authorities when required.

 

3.5 Data Retention

 

We retain applicant data for 6 months after the position has been filled unless you consent to a longer retention period for future job openings.

 

3.6 Your Data Protection Rights

 

You have the following rights:

  • Request access to the personal data we hold about you.
  • Request the correction or deletion of inaccurate or irrelevant data.
  • Object to the processing of your data for certain purposes.

 

To exercise these rights, please contact us at admin@healthandcaretoday.com.

 

  1. Contact Information

 

If you have any questions or concerns about our privacy policy or wish to exercise your rights, please contact:

 

HACT (Health and Care Today Pvt Ltd)
Email: admin@healthandcaretoday.com
Phone: 07308400901 or 03332244922
Address: 531 Hob Moor Rd, Birmingham B25 8TH

 

This privacy policy ensures compliance with applicable data protection laws, including the UK GDPR and the Data Protection Act 2018.