Introduction
As a custodian of personal information relating to your medical treatment, I must treat that information in accordance with all applicable law and guidance. This privacy Notice provides you with a detailed overview of how I will manage your data, from the point at which it is collected and onwards.
This Privacy Notice sets out details of the information that I as the clinician responsible for your treatment (including my PA, my secretaries and my IT consultant) may collect from you and how that information may be used. This Privacy Notice will give you all details you need on how I and my assistants will use your information and how we will comply with the law in doing so. Please take your time to read this Privacy Policy carefully.
Information collected
Personal information I hold about you will include:
Your full name, date of birth, contact details (postal address, email address, telephone number), emergency contact details, occupation, background referral details.
It also may include your current or previous physical and mental health and information about any healthcare that you have received from other healthcare providers such as GPs, dentists or hospitals (private and/or NHS).
Data Sources
All data collected for the patient database of which I am the controller come from the following sources:
- Information you provide at the registration and during the consultation
- Information provided by your GP and/or referring consultant (including their secretaries)
- Results of the investigations I have initiated (blood test results, various ultrasound results, MRI etc).
- Medical records from the NHS and any private healthcare organisation.
Purpose of storing information
Information collected and stored about you will be used for the purpose of providing you with care and treatment, sharing it with other medical professionals and clinic audit programmes, maintaining accounting record and seeking feedback on your patient experience. I will not use your data for research or marketing purposes.
Security
To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information I have put in place appropriate physical, electronic and managerial procedures to safeguard and secure the information I control. Our emails are encrypted and our computers are secure by way of passwords.
Data recipients
Information related to you will only be accessed by authorized persons with a relevant and tangible need to see your information. I will collect, use and share the data you give me only in the exercise of my professional function as your physician.
Information related to you may be made available to your GP, referring consultants (including their secretaries) and your insurance policy provider. I engage third party service providers, who assist me in the administration of your healthcare, to process your personal data on my behalf for the purpose of storage, analysis and to comply with my obligations. These service providers/ data processors are: my PA, my secretaries and my IT consultant. I may communicate with these third parties by telephone, email and post. They may only process your personal data in accordance with this Privacy Notice and may not use your data for their own purposes.
How we will communicate with you
In order to communicate with you, we are likely to do this by telephone, SMS, email and/or post.
Your rights
You have the following right regarding your information that may apply depending on the circumstances:
- The right to access (to obtain access to the information processed by my team)
- The right to rectify (to have your information corrected if it is inaccurate of incomplete)
- The right to erasure (known as “the right to be forgotten” and in simple terms, enables you to request the deletion or removal of your information where there is no reason for me to keep using it)
- The right to restrict processing (right to “block” or suppress further use of your information in certain circumstances. When processing is restricted I can still store your information, but may not use it further)
- The right to data portability (to obtain and reuse your personal data in a structured, commonly used format in certain circumstances)
- The right to object (to certain types of processing, in certain circumstances).
For more information on your rights, if you would like to exercise any of these rights, or if you are unhappy with how your information has been handled, please send me an email at the email address found at the end of this document.
Terms of retention
I will store your data not only in an electronic format but also in a paper form. My desktop computer, which is solely used for my clinical and medico-legal practice, is password protected.
Your information will be retained in a paper form for 5 years after our last interaction with you. Your information which is in digital form as part of my patients’ database will be retained for as long as reasonably necessary to fulfil the relevant purposes and in order to comply with my legal and regulatory obligations.
How to contact me
If you have any questions or comments about this Privacy Notice, please feel free to email me at info@femhormones.co.uk
Updates to this Privacy Notice
I may update this Privacy Notice from time to time to ensure that it remains accurate. In the event that these changes result in any material difference to the manner in which we process your personal data then I will provide you with an updated copy of the Policy.
This Privacy Notice was last updated 25 May 2018