BOND PODIATRY – PRIVACY NOTICE
Last updated: June 2026
INTRODUCTION
Bond Podiatry is a local, HCPC‑registered podiatry practice providing expert foot health care in Darlington.
This privacy notice explains how and why we collect, store, use and share your personal information, including medical records, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It also explains your legal rights and how to exercise them.
Data Controller:
Bond Podiatry
[Blacketts medical practice, Bondgate, Darlington]
[07534411888]
[tyler@bond-podiatry.com]
www.bond‑podiatry.com
HCPC Registered | Fully Insured | ICO Registered
IMPORTANT – TAKEOVER OF PRACTICE
Please be aware that Bond Podiatry has taken over the provision of podiatry services previously offered at this location / by the previous practitioner.
As part of this lawful transfer:
• We have received and now hold all existing patient records (paper and digital)
• These records have been transferred securely and legally, and are treated with the same strict confidentiality and protection as any new records we create
• We use these records only for your ongoing care and in line with this privacy notice
• If you do not want us to keep or use your previous records, please let us know immediately — we will securely archive or destroy them as you request
WHAT INFORMATION WE COLLECT & HOLD
We only collect information that is necessary and relevant for your foot health care. This includes:
Personal details
• Full name, date of birth, address, phone number, email address
• Emergency contact details
Medical & health information (Sensitive Personal Data)
• Medical history, current conditions, allergies, medication list
• Foot health assessment notes, diagnosis, treatment plans, photos, X‑ray/referral reports
• Appointment records, payment details, consent forms
Administrative details
• Booking history, communication records, feedback
• Information required for insurance or regulatory purposes
We do not collect any unnecessary information, and we never use your data for marketing without your clear permission.
WHY WE USE YOUR INFORMATION
We process your data lawfully under these legal bases:
1. Performance of a contract: To provide you with agreed care, treatment and appointments
2. Legal obligation: To meet NHS, HCPC, CQC and health & safety requirements
3. Legitimate clinical interest: To ensure safe, effective, high‑quality care
4. Consent: Where you have specifically agreed (e.g. for sending appointment reminders, taking clinical photos)
We use your data only to:
• Arrange and carry out your appointments and treatment
• Maintain accurate health records for your safety and continuity of care
• Contact you about bookings, reminders, results or important health updates
• Send invoices and process payments
• Comply with legal, insurance and regulatory duties
• Defend our legal rights if needed
HOW WE STORE & PROTECT YOUR INFORMATION
We take your privacy very seriously and use strict security measures:
• Digital records: Stored on password‑protected, encrypted systems (including Cliniko practice management software) — only authorised staff have access
• Paper records: Kept in locked, secure cabinets / under‑desk storage (compliant with medical storage rules) — no unauthorised access
• Transfer security: When records were transferred to us, this was done securely and confidentially
• Third‑party systems: Any software we use is fully GDPR‑compliant and contracts are in place to protect your data
We never sell, rent or trade your personal information to anyone.
WHO WE SHARE IT WITH
We only share your information when required or permitted by law, or when you give us permission:
• Other healthcare professionals (e.g. your GP, specialist, radiographer) — for your ongoing care
• Regulatory bodies (HCPC, CQC, NHS) — when legally required
• Insurance providers — if you are claiming for treatment
• Our professional advisors — strictly limited to administrative purposes
• Law enforcement agencies — only if required by court order or law
All third parties must follow strict data protection rules.
HOW LONG WE KEEP YOUR INFORMATION
We keep your records only for as long as required by professional guidelines and UK law:
• Adults: Kept for 8 years after your last appointment, then securely destroyed
• Children / young people: Kept until their 25th birthday (or 8 years after last appointment if over 18), then destroyed
• Legal/insurance records: Kept as required by law
When records are no longer needed, they are shredded or permanently deleted in a secure way.
YOUR RIGHTS
Under UK GDPR, you have these rights over your data:
1. Right of access: Ask for a copy of all information we hold about you (we provide this free of charge, usually within 1 month)
2. Right to correction: Ask us to fix any mistakes or update out‑of‑date information
3. Right to erasure (“Right to be forgotten”): Ask us to delete your records — we will do so unless we have a legal reason to keep them
4. Right to restrict processing: Ask us to limit how we use your data
5. Right to data portability: Receive your data in a common digital format to share with another provider
6. Right to object: You can object to us using your data for non‑essential purposes (e.g. marketing)
7. Right to withdraw consent: Where you gave permission for something, you can change your mind at any time
To use any of these rights, just ask us in person, call or email — we will help you and explain the process.
MARKETING COMMUNICATIONS
• We only send you updates, health tips or service news if you have specifically agreed to receive them
• You can opt out of these messages at any time — just click “unsubscribe” in an email, or tell us directly
• We never share your details for marketing purposes
AUTOMATED DECISIONS / PROFILING
We do not use your data to make automated decisions, and we do not create profiles about you for any purpose other than your direct clinical care.
COMPLAINTS
If you are unhappy with how we handle your personal information or privacy rights, please speak to us first — we will do everything we can to put it right.
If you are still concerned, you have the right to complain directly to the:
Information Commissioner’s Office (ICO)
0303 123 1113
www.ico.org.uk