Data Protection

Neuro Rehab Works is registered with the Information Commissioner’s Office (ICO), with the registered data controller being Sandy LeBlanc, Clinical Director and Occupational Therapist.

Your personal information, along with relevant clinical details, are kept securely. Information is processed by professionals in rehabilitation and administrative support, who are all bound by data protection agreements and professional confidentiality.

All records are kept electronically and encrypted, in line with GDPR legislation.

The lawful basis for processing your personal data is Article 6(1)(b) of the UK GDPR, which relates to processing necessary for the performance of a contract. As I process special category data (health data), the additional condition under Article 9(2)(h) applies, allowing processing for the provision of health or social care or treatment.  As an accredited member of the HCPC I operate under a strict code of confidentiality.

Consent and Confidentiality

You will be asked for your consent for sharing of information with relevant people involved in your rehabilitation, including the multi-disciplinary team, GP, solicitor, social worker, or NHS services. If there is anything that you do not wish to be shared, this can be discussed and agreed at the start of your involvement with Neuro Rehab Works Ltd.

There may be a need to take photographs of video to support the assessment and/or rehabilitation process. This will be discussed with you, with your consent given prior to doing so.

Communications

Communications by email are send securely and password protected to maintain confidentiality. It is important to note that the security cannot be absolutely guaranteed due to the nature of server email systems.

Your Rights

You have the right to request a copy of the information about you. If you would like a copy of some or all of your personal information, please contact admin@neurorehabworks.co.uk to make a request, including a signed letter of authority. Information will be provided within 30 days.

Data Retention

Your information is kept securely for a period of 7 years following discharge to comply with legal obligations. For people under 25 years old, will be retained for 35 years.

Note-taking

Notes will be taken as part of the assessment and therapy process. This may be written (with no personal identifying information), typed and stored securely using a secure online-notetaking platform (see https://qunote.com/data-security/ for more information).

Notes may be taken during the session using an AI note-taking tool called Heidi (see https://www.heidihealth.com/en-gb/compliance/uk for more information). This is to focus more on client care and improve the accuracy and efficiency of documentation.