When you supply your personal details to this practice they are recorded and stored for 4 reasons:
- We need to collect personal information about your health in order to provide you with the best possible treatment. Your requesting treatment and our agreement to provide that care constitutes a contract. You are free to refuse to provide information, but in that case we would have to refuse treatment.
- We have a legitimate interest because without collecting and recording information we would be unable to do our job properly.
- We think it is important that we can contact you to confirm appointments or update you on matters that are related to your medical care, which again constitutes a legitimate interest.
- Provided we have your consent, we might occasionally send you information in the form of articles or newsletters. You may withdraw your consent for this at any time using any convenient method.
We have a legal obligation to retain your records for 8 years after your most recent appointment or until your 25th birthday if this is longer, but after this period you may ask us to delete your records if you wish. Otherwise we will retain your records indefinitely in order that we can provide you with the best possible care should you need to see us at some future date.
Your records are stored on paper in a locked filing cabinet. We do not at this time keep electronic records.
We will never share your data with anyone who does not need access without your written consent. Only the following will have routine access to your data.
- Your practitioner in order that they can provide your treatment
- Reception staff (contact details only - not medical notes)
You have the right to see what personal data of yours we hold and you can also ask us to correct any factual errors. Provided the legal minimum period has elapsed you can also ask us to erase your records.
We want you to be absolutely confident that we are treating your personal data responsibly and that we are doing everything we can to ensure that the only people who can access that data have a genuine need to do so. Of course, if you feel that we are mishandling your personal data in some way you have the right to complain. Complaints need to be sent to the data controller:
16 Bramshall Drive
If you are not satisfied with our response then you have the right to raise the matter with the Information Commissioners Office.