Your Personal Information
As a healthcare provider we need to hold information about our patients to help ensure that you receive proper, necessary and effective treatment. We do not hold or process your information for any other purpose.
We collect information about you when you:
- fill in an online consultation
- visit the clinic for a consultation or for a procedure
- voluntarily complete forms and questionnaires
- provide feedback
- speak to a member of our team via phone or email
The information we may collect includes:
- your full name, date of birth and address, phone number, email address
- your next of kin contact details
- medical history
- details of times we have been in contact with you
- patient experience feedback and treatment outcome information you provide
- notes and reports about your health and any treatment you have received or need, including clinic and operational visits and medicines administered
We hold the minimum information required to provide our services – for example we will never ask you for credit or debit card details because we do not hold financial information at any time.
For staff monitoring, training and quality control purposes, or to meet regulatory compliance conditions, we may make temporary recordings of your interactions with staff.
We will securely destroy your information when it is no longer required – however please note that we are legally obliged to retain records of your surgical procedures for a minimum of ten years.
We firmly believe that information should be held securely and should only be available on a ‘need to know’ basis – for example members of staff will only have access to your personal information where it is relevant to their role.
The clinic has a number of physical and digital security measures in place to safeguard your information, and is in compliance with the UK Data Protection Act and the EU General Data Protection Regulations.
The clinic is registered as a Data Controller with the Information Commissioner’s Office –
We will not share your information with any third party individuals, companies or organisations without your explicit consent – except where we are legally or medically obliged to (for instance in accordance with a court order). If we are obliged to share your information, we will always try to get your consent first. If this is not possible we will share the minimum information necessary, and then we will notify you immediately what information has been shared and with whom.
When any organisation holds a copy of your personal information, you have a number of rights:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object
- rights in relation to automated decision making and profiling
This document informs you about the collection and use of your personal data. You may ask for access to a copy of the data we hold at any time. And if there are any inaccuracies in the data that we hold about you, we will update and rectify our records upon request.
The right to erasure (‘right to be forgotten’) means that you have the right to ask the clinic to destroy your personal information that is held on record – however the clinic is legally bound to retain certain medical records for a fixed number of years (and so these records are exempt).
For more information about your rights, please visit the ICO website:
For more details on how we process your personal data, please contact the clinic directly on 0141 248 4424 or firstname.lastname@example.org.