Privacy policy.

Upper Limb and Hand Rehab Ltd T/A Virtual Hand and Upper Limb Clinic
Company number: 15663192
Registered office: 128 City Road, London EC1V 2NX
ICO registration: ZB741744
Email: info@upperhand.rehab

Upper Limb and Hand Rehab Ltd is committed to protecting your privacy and legal rights when dealing with your personal information. This notice provides clear details about the information collected about you, how it is used and protected, and your rights in relation to it.

If you have any queries, please email info@upperhand.rehab.

Upper Limb and Hand Rehab Ltd provides the following healthcare services:

• Occupational Therapy
• Hand Therapy
• Virtual rehabilitation consultations

Data protection laws require appropriate technical and organisational measures to prevent unlawful access or processing. The following are in place:

• Clinicians and administrative staff trained in appropriate handling and breach response
• Common-sense cybersecurity practice (locked screens, prompt OS updates)
• Two-factor authentication on key systems where possible
• Regular password rotation
• Industry-standard encryption of hardware storing personal information
• Third-party providers compliant with data protection laws

Standard personal information includes: name, address, email, phone, date of birth, occupation, next of kin, complaint records, and financial details for payment (card details are not stored).

Special category information covers health data: clinical notes, examination findings, medical imaging, diagnostic test results and correspondence.

Information is processed under legitimate interests, legal obligation, and (for marketing) explicit consent. Healthcare-related processing falls under legal obligation for the provision of healthcare and the establishment, exercise or defence of legal claims.

The clinic complies with the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014 Part 3, Section 2, Regulation 17(c), which requires maintaining an accurate, complete and contemporaneous record for each service user.

Information may be shared with the following where necessary:

• Doctors, surgeons, clinicians and other healthcare professionals involved in your care
• Their administrative staff
• People or organisations required by law or regulatory body
• Law enforcement where required by law or court order
• A parent or legal guardian, if you are a minor
• Anyone you have authorised

Information is normally stored on secure systems within the EEA; if systems outside the EEA are used, contractual or other safeguards (including industry-standard encryption) are in place.

Personal information is normally processed or stored for eight years for adults, and until their 25th or 26th birthday for children, with circumstantial extension. Marketing-consent data is erased on request.

You have the right to be informed, the right of access (subject access request, response within 30 days), the right to rectification, the right to erasure (subject to legal record-keeping obligations), the right to restrict processing, the right to object, and the right to lodge a complaint with the ICO.

To exercise any of these rights, email info@upperhand.rehab.

No automated decision-making or profiling is performed with your personal information.

You can contact the ICO directly at ico.org.uk/concerns or by post: ICO, Wycliffe House, Water Lane, Wilmslow SK9 5AF.

Steps have been taken to avoid the use of cookies and analytic tracking on this site.