PRIVACY POLICY
Reviewed and updated: 21st October 2026
Review schedule: Every 2 years
Next review date: October 2028
Owner: Kim Wilson, Clinical Director
What we do
We are a multi-disciplinary team focused on empowering people with brain injury, stroke, MS,
Parkinson's and other neurological conditions to improve their health, independence and quality of life.
We provide neurological physiotherapy services alongside other rehabilitation therapies and exercise professionals. These can be provided via arranged home visits or at our centre.
At Surrey Hills Rehab we aim to provide you with the highest quality healthcare. To do this we must keep information about you, your health and the care we have provided to you or plan to provide to you. This privacy statement provides a summary of how we use your information.
The Data Protection Act and General Data Protection Regulation controls how your personal information is used by organisations, businesses or the government. Under the Act Surrey Hills Rehab is defined as a ‘data controller’ of personal information. We collect information to help us provide and manage healthcare to our patients. The data controller is registered with the Information Commissioners Office (registration number A8168529)
All staff are individually registered with the ICO
What kind of personal information does the SHR collect:
• Name, address, date of birth, NHS number and next of kin
• Details of diagnosis, treatment and hospital visits
• Correspondence with client, GP and other healthcare professionals involved with the client.
• Allergies and health conditions
Why we collect information about you
The people who care for you use your information and records to:
• provide a good basis for all health decisions made by you and your care professionals
• allow you to work with those providing care
• make sure your care is safe and effective
• work effectively with those providing you with care
How long do we hold information for?
Records are retained in accordance with national guidance from the: Department of Health and Social Care and the Records Management Code of Practice for Health and Social Care 2016. Records including confidential information are securely destroyed in line with this code of practice.
Information sharing with NHS and non-NHS organisation’s
For your benefit we may need to share information from your health records with NHS organisations from whom you are also receiving direct care, also social services or other private healthcare organisations. We will always seek your permission to share your information with organisation’s for purposes other than your direct care.
However, in exceptional situations we may need to share information without your permission if:
• it is in the public interest – for example, there is a risk of death or serious harm
• there is a legal need to share it – for example, to protect a child under the Children Act 1989
• a court order tells us that we must share it
• there is a legitimate enquiry from the police under the Data Protection Act for information related to a serious crime.
What are your rights?
You have the right to withdraw and refuse consent to information sharing at any time, but note that not sharing your information may affect the quality and safety of the care you receive.
Where information from which you can be identified is held, you also have the right to:
• request that your information is corrected
• have your information updated where it is no longer accurate.
How do I access information recorded about me and how do I raise a concern?
Under the Data Protection Act individuals have a right to access information that is held about them by an organisation. If you have undergone physiotherapy treatment through Surrey Hills Rehab and wish to access your information or raise a concern, please contact:
Data Protection Officer: KIM WILSON, Surrey Hills Rehab, Snoxhall Community Centre, Snoxhall Playing Fields, Knowle Lane, Cranleigh, Surrey, GU6 8BL Tel: 07456 641356 Email: kim@surreyhillsrehab.co.uk
You can also contact the Information Commissioner’s Office, the UK's independent body set up to
uphold information rights.
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk/for-the-public/
Helpline: 0303 123 1113 (local rate) or 01625 545 745
Date: 21/10/16
Signed: K.Wilson PRINT: Kim Wilson
Role: Specialist NeuroPhysiotherapist/Clinical Director