Privacy and Data Confidentiality Notice for Private GP Extra May 2020
I am Dr Adam Simon t/a Private GP Extra. Our GP consultations are held in numerous private clinics in the North West of England. I, Dr Simon, act as Data Controller in respect of your personal data. If you have any queries in respect of your personal data or this notice or you wish to speak to our Data Protection Officer (Practice Manager Lesley Kaye) you can do so by calling us on 0161 428 4464 or emailing us at firstname.lastname@example.org
This notice sets out how Private GP Extra will use your personal data as part of the GP services Private GP Extra provides to you (or in which you have indicated an interest). Please ensure that you have read and understood this notice and keep a copy for future reference.
Private GP Extra may collect and hold the following personal data about you: your name, address, email address, phone number, date of birth, gender, details of next of kin/emergency contact information and medical records (which will include details of your health, including any medical conditions and sex life/sexual preferences to the extent this relates to any symptoms/clinical treatment we are discussing with you). To help us keep your data accurate and ensure that Private GP Extra can provide the highest quality service to you, please let us know if there are any changes to your personal data.
Private GP Extra uses your personal data to provide our GP services to you, to comply with our legal obligations and to send you details of available appointments and appointment reminders by your preferred contact method. Private GP Extra uses the personal data set out above to provide our GP services to and to comply with our legal and regulatory obligations as a provider of medical services. Private GP Extra is a professional organisation subject to an obligation of professional secrecy.
Private GP Extra does not transfer any of your data outside of the European Economic Area.
Private GP Extra will share some of your personal data with our IT service provider in order to provide our GP Services to you.
Private GP Extra will retain and process your personal data in accordance with industry guidance. Private GP Extra will continue to hold and use your personal data as set out above for:
(i) where you are an adult, such time as you are a patient at with our service (to enable us to provide our GP services to you during this period) and thereafter will continue to hold these for record keeping purposes for up to ten years after your death; and
(ii) where you are a child aged 17 or under, such time as you are a patient and thereafter until your 26th birthday (unless you continue to be a patient after your 17th birthday, in which case we will continue to hold your data as an adult for the period set out above),
(iii)to ensure we comply with our legal obligations, good industry practice and to assist us in defending any potential claims.
Private GP Extra have put in place appropriate security measures to protect your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, Private GP Extra limits access to your personal data to those employees, agents, contractors and other third parties who have a business and need to know such information. These parties will only process your personal data on our instructions, and they are subject to a duty of confidentiality. Details of your medical records are stored on a nationally recognised, secure (password protected), login only GP software system and your other personal data is stored in a locked electronic and/or physical file to which only your GP has access.
You have the following rights in respect of the personal data Private GP Extra holds about you: (i) a right of access to such data; (ii) a right to object to our processing for direct marketing purposes; (iii) a right (in certain circumstances) to request that your personal data be transferred to you or a third party; and (iv) a right (in certain circumstances) to have inaccurate personal data rectified, blocked, erased or destroyed. If you wish to exercise any of these rights, please contact us by email email@example.com or telephone 0161 428 4464. You also have a right to lodge a complaint with the Information Commissioner’s Office (ICO) but we request that you contact us before escalating any complaint to the ICO.
Private GP Extra may update this policy from time to time to reflect changes in the way we use your personal data or legal/regulatory requirements. If we do update this policy, Private GP Extra will alert you to this with a message on our website.