We are committed to protecting the privacy of all individuals that provide personal information to us. We understand the importance of ensuring that the personal information entrusted to us is protected and respected and we, therefore, treat personal data in accordance with our obligations under the General Data Protection Regulation, in addition to our clinical confidential requirements. We may review and change this policy from time to time. When we do, we’ll update this version.
THE PERSONAL INFORMATION WE COLLECT
We may collect and process the following personal information. Note, without your consent for this, we will be unable to provide treatment:
Medical Records – Information must be collected as part of your registration with the clinic. This will include but is not limited to name, address, date of birth, email address, phone number, next of kin and medical history.
Enquiries – We may record your details in order to track and follow-up on enquiries, in addition to scheduling appointments. This includes information such as your name, reason for enquiring and contact details.
HOW WE USE YOUR INFORMATION
When you provide us with personal information the purpose for which you are providing that information will always be made clear. We may use this information for some or all of the following reasons:
To provide you with the information, treatments, products and services that you request from us.
WHO WE SHARE YOUR PERSONAL DATA WITH
Selected third parties such as The Doctors Laboratory for test results, HealthXchange Pharmacy for prescriptions in order to provide your agreed treatment, or our marketing agency, Studio III Marketing. Opting out of sharing your information with these providers may affect our ability to treat you.
There may also be circumstances where we are under a duty to disclose your personal information or share your personal information in order to comply with any legal or regulatory requirement, obligation or request. This includes the police for the prevention or investigation of a crime, or our Insurers, legal advisors or other third parties who need access to it in the context of managing, investigating or defending claims or complaints.
We cannot guarantee that the information you send us over the internet is secure. Once we receive it we will take all reasonable steps to protect the information you supply to us. Please be aware that we process and store information in the United States. By using the website, you agree that the collection, use, transfer, and disclosure of your information and communications will be governed by the applicable laws in the United States. All of the data we collect is stored on servers located in the United States. Accordingly, we may transfer and store data outside of your home country. When we transfer data out of the European Economic Area or Switzerland, we make use of the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks, EU-approved standard contractual data protection clauses, binding corporate rules for transfers to data processors, or other appropriate legal mechanisms to safeguard the transfer. Backups of electronically stored data are taken regularly, with strong encryption used to protect all files. We align our retention periods for the storage of patient information and records to the NHS Records Management code of practice.
You have the right to ask us not to process your personal information, but where consent is withdrawn for the processing of personal data from your medical records, our ability to continue your treatment will be impaired. In some circumstances, you have the right to be forgotten and we will erase all data held about you. Medical records are exempt from erasure before our maximum retention periods.
Requests for erasure should be made in writing to Practice Manager, Dominic Bray – Facial Plastic Surgery, 70 Harley Street, London W1G 7HF and will be assessed on a case by case basis.
ACCESS TO INFORMATION
The General Data Protection Regulation gives you the right to access information held about you, including CCTV footage of yourself. Any requests should be made in writing to the Practice Manager, Dominic Bray – Facial Plastic Surgery, 70 Harley Street, London W1G 7HF
All requests will be subject to the appropriate identification checks.
CONTACT AND COMPLAINTS
Information Commissioner’s Office
or further information can be found at www.ico.org.uk