Reform Clinic's Privacy Policy
At Reformkliniken AB (org.nr. 556890-3396), we take your privacy seriously and ensure that your personal data is handled securely. In this policy, we explain how we collect and use your personal data and what rights you have. We are responsible for protecting your data. If you have any questions, email us at info@reformkliniken.se.
1. What personal data we process
What Tasks: We collect your personal and contact information such as name, social security number, email and telephone number when you book something with us or ask for information. We also save emails that we exchange with you.
Use of Data: We use this data to manage our relationship with you as a customer. This means that we contact you about bookings, answer your questions, provide you with follow-ups and support. We may also use your phone number to send confirmations and reminders via SMS.
2. How long do we store your information?
Unless you specifically request otherwise, we will store your data in our customer register for 10 years from the end of the customer relationship. Parts of the personal and contact information will also appear in the journal and will then be saved in accordance with what applies to medical records.
In our customer register
We will save your data for 10 years after the end of our customer relationship with you. A customer relationship is considered terminated when we have completed your treatment and follow-up.
In your journal
We store information about your health, such as details of any treatments, your medical history or tests (such as blood counts). This data includes what you tell us and notes from doctors. This information is kept in your medical record for 10 years, as required by the Patient Data Act.
Payment information
When you pay for our services, we collect payment information depending on the payment method. This information is used to process the payment and appears in our records.
If you finance a treatment through an external party (such as a bank or insurance company), we receive information from them. This may be information that the payment has been approved. These third parties handle your data according to their own rules, which you can read about in their privacy policies.
3. Why do we process your information?
Payment information
We process your payment information in order to complete your purchases. Once the payment is complete, we will delete your payment details from our systems. However, we store accounting information as invoices (with your name and address) for up to seven years after the end of the financial year in accordance with the Swedish Accounting Act.
Newsletters
If you are a customer of ours or have chosen to subscribe to our newsletter, we will use your email address to send it to you. Your first name can be used to make the content more personal. If you no longer wish to receive newsletters, you can unsubscribe via a link in the letter. We send newsletters to take care of our customers and for marketing purposes.
Social Media
We are active on social media where you can talk to us and share pictures. We use the information you share only in the social media where you shared it. For example, if you tag us in an image, you agree to us displaying the image in our feed. If you would like us to delete something you have shared with us, let us know and we will help you. We also save the communications from social media to confirm what has been said if necessary in the future and to manage customer relationships.
About Before and After Images
Sometimes we use photos of our clients before and after treatments to show our services. If we want to use your images, we will ask you to sign an approval.
How we collect information
Normally, we receive all information directly from you. But sometimes we may need to collect information from other sources, like a medical record from another health care provider. If this happens, we will inform you and you are in control of the process. From time to time, we may also check your contact information through public records.
4. Share your data with others
Our Employees: Our staff have access to your information, but only the information they need for their work. For example, only health professionals see your medical record. Please note that during a booking you normally provide certain health information which will then be provided to administrative, not treating, staff.
Suppliers and Subcontractors: We share certain information with companies that help us with services, such as maintaining our medical records or sending newsletters. Providers are always bound by confidentiality and may not process your data in any way other than as instructed by us.
Referrals and Prescriptions: If you need a referral or prescription, our staff will send this to the right place. Prescriptions can be sent electronically to pharmacies. If you need medicines, the treatment provider will normally send a prescription electronically to all Swedish pharmacies. Some specific prescriptions must be sent to a named pharmacy, but normally all pharmacies can see your prescription.
Information to Authorities: Sometimes we may need to provide your data to authorities, if required by law or if you have given us permission. Please contact us if you would like to know more about what information may be disclosed to the authorities.
5. Where your data is processed
We process your personal data only in Sweden or within the EU/EEA. We will not send your information to countries outside the EU/EEA without first ensuring that it is legal and secure.
6. Summary of Your Rights
Right to object to processing: You may object to the use of your personal data for specific purposes that we consider to be in our legitimate interests. If you make such an objection, we will consider your request and decide whether to continue processing your data.
Right of access and data portability: You have the right to request a free copy of the personal data we hold about you. This includes information about how we have collected, used and shared your information. You can also request that we transfer your data to another organisation.
Right to have data deleted: If your personal data is no longer necessary for the purposes for which it was collected, or if there is no legal basis for the processing, you can request that we delete it.
Right to block data: You can request that we block access to data in your patient record.
Right to rectify data: If you discover inaccuracies in the data we hold about you, you have the right to request that we correct them.
Right to restriction of processing: You can request that we restrict the processing of your personal data while any inaccuracies are investigated or if you have objected to the processing.
Right to damages: If you suffer damage because we have processed your personal data in a way that is contrary to law, you have the right to claim compensation.
Right to lodge a complaint: If you believe that we are not processing your personal data properly, you have the right to lodge a complaint with the Data Protection Authority.
7. Limitations and Requirements
Some laws may restrict these rights, such as the Patient Data Act and other legislation related to healthcare, privacy, filing, and accounting and tax. Your data will only be used to the extent necessary to comply with these legal requirements.
8. Contact Us
Reformkliniken is responsible for the processing of your personal data in accordance with this privacy policy and complies with Swedish data protection legislation, including the GDPR. For questions, please contact us by email at info@reformkliniken.se.
