Privacy and retention policy

As a member of UKCP and other registered bodies. I am bond by a strict code of conduct and ethics. his is to ensure you receive the best possible treatment from me, in complete confidence.

The only time your information is shared is by your instruction and with your written consent. Information is only shared with other healthcare professionals such as your GP and referring consultants. The exception to the rule is if your life is in immediate danger from self-harm or you are at risk of harming others. I have a duty of care to you and as such I will, as a matter of safeguarding, inform the relevant authority to keep you safe-this may be your GP and your family,or in some cases, the emergency services.

As your therapist, I am the data controller -which means I am responsible for the data I collect from you and store.

I have laid out a more detailed policy statement below which may be updated from time to time.

  1. As your therapist and therefore custodian of personal information relating to your medical treatment, I must only use that information in accordance with all applicable law and guidance. This Privacy Notice provides you with a detailed overview of how I will manage your data from the point at which it is gathered and onwards, and how that complies with the law.  I will use your personal information for a variety of purposes including, but not limited to, providing you with care and treatment, sharing it with other medical professionals.

 

  1. In addition, you have a number of rights as a data subject. You can, for instance, seek access to your medical information, object to me using your information in particular ways, request rectification of any information which is inaccurate or deletion of information which is no longer required (subject to certain exceptions).  This Privacy Notice also sets out your rights in respect of your personal information, and how to exercise them.

Executive summary

Introduction

Introduction

  1. This Privacy Notice sets out details of the information that I, as a clinician responsible for your treatment (and including my medical secretaries), may collect from you and how that information may be used. Please take your time to read this Privacy Notice carefully.

About me

  1. In this Privacy Notice I use “I” or “mine” or “my” to refer to me as the clinician who is using your personal information.
  2. In the event that you have any queries, comments or concerns in respect of the manner in which I have used, or potentially will use, your personal information then you should contact me directly and I would be happy to discuss further. You can write to me at: 18a Green lane, Chinley, Derbyshire, SK23 6AA or call me on 07753 95731.

Your personal data

I am a Data Controller in respect of your personal information which I hold about you.  This will mainly relate to your medical treatment, but will be likely to also include other information such as financial data in relation to billing.  I must comply with the data protection legislation and relevant guidance when handling your personal information.

  1. I will provide your treatment from a [Spire Healthcare Hospital/other independent provider] and, in due course, it may be necessary for [Spire/other independent provider] to also process your personal data. I will do so in accordance with the law, the principles of this Privacy Notice and to the extent that it is necessary to do so.  This could be where [Spire/other independent provider] needs to arrange other healthcare services as part of your treatment, such as nursing or dietician advice, or support other aspects of the treatment which I provide to you.  In that case, [Spire/other independent provider] will become a joint Data Controller in respect of your personal information and you will be provided with a copy of their Privacy Notice which sets out how they will manage that information
  2. Your personal information will be handled in accordance with the principles set out within this Privacy Notice. This means that whenever I use your personal data, I will only do so as set out in this Privacy Notice.  From time to time, I may process your personal information at a non-[Spire/other independent provider] site (medical or non-medical).

Your personal data

What personal information do I collect and use from patients?

What personal information do I collect and use from patients?

  1. I will use “special categories of personal information” (previously known as “sensitive personal data”) about you, such as information relating to your physical and mental health.
  1. If you provide personal information to me about other individuals (including medical or financial information) you should inform the individual about the contents of this Privacy Notice. I will also process such information in accordance with this Privacy Notice.
  1. In addition, you should note that in the event you amend data which I already hold about you (for instance by amending a pre-populated form) then I will update my systems to reflect the amendments. My systems will continue to store historical data. 

Personal information  

  1. As one of my clients, the personal information I hold about you may include the following:
      1. Name
      2. Contact details, such as postal address, email address and telephone number (including mobile number)
      3. Insurance policy details
      4. Occupation
      5. Emergency contact details, including next of kin
      6. Background referral details

Special Categories Personal Information

As one of my clients, I will hold information relating to your medical treatment which is known as a special category of personal data under the law, meaning that it must be handled even more sensitively. This may include the following:

  1. Details of your current or former physical or mental health, including information about any healthcare you have received from other healthcare providers such as GPs, dentists or hospitals (private and/or NHS), which may include details of clinic and hospital visits, as well as medicines administered. I will provide further details below on the manner in which I handle such information.
  2. Details of services you have received from me
  3. Details of your nationality, race and/or ethnicity
  4. Details of your religion
  5. Details of any genetic data or biometric data relating to you
  6. Data concerning your sex life and/or sexual orientation
  1. The confidentiality of your medical information is important to me, and I make every effort to prevent unauthorised access to and use of information relating to your current or former physical and mental health (or indeed any of your personal information more generally). In doing so, I will comply with UK data protection law, including the Data Protection Act 2018 and all applicable medical confidentiality guidelines issued by professional bodies including, but not limited to, the General Medical Council and the Nursing and Midwifery Council.

Special Categories Personal Information