Last updated: 21 June 2026
At N J Harrison Chiropody Services, I understand that when you come to me for treatment, you're sharing personal and sometimes sensitive information. Protecting your privacy isn't just a legal requirement — it's a fundamental part of the trust between us. This statement explains in plain terms how I look after your information.
When you become a client, I collect and keep:
I need a lawful reason under UK data protection law to collect and use your information. For most of your data, I rely on Article 6(1)(f) UK GDPR — legitimate interests. Specifically, my legitimate interest in retaining information necessary to provide you with the best possible treatment and to comply with my professional indemnity insurance requirements as a practitioner in private practice.
For health information specifically, I rely on Article 9(2)(h) UK GDPR — processing is necessary for the provision of health care treatment by a health professional subject to a professional obligation of confidentiality. The additional condition under DPA 2018 Schedule 1, Part 1, paragraph 2 (health or social care) also applies. My professional obligation of confidentiality is grounded in the common-law duty of confidence owed by health and wellbeing practitioners to their clients, and the standard professional practice expected of practitioners in private practice.
As a practitioner in private practice, I engage in ongoing continuing professional development to maintain and improve my skills. I do not have a mandatory clinical supervision requirement. Where I engage in peer consultation to reflect on my practice, all discussion is fully anonymised and your identity is never disclosed.
I keep your information confidential, but in limited circumstances others may have access:
There are rare situations where I may need to share information without your permission:
Whenever possible, I will discuss this with you first.
I keep your records for 7 years after our last session, in line with the Limitation Act 1980 and standard professional indemnity insurance requirements.
If you were under 18 when we worked together, I keep your records until you reach the age of 25, or for 7 years after our last session — whichever is longer.
You have rights over your personal information:
Under the Data (Use and Access) Act 2025, you have the right to complain directly to me first. Please contact me at nomeanfeet [at] hotmail.co.uk or visit my compliance page at https://njharrisonchiropodyservices.policydiary.co.uk.
If you remain dissatisfied, you can complain to the Information Commissioner's Office (ICO):
Nicola Harrison
N J Harrison Chiropody Services
ICO Registration: ZB774205