(Why I collect your personal data and what I do with it - in plain english)
When you supply your personal data to me it is stored for 4 reasons:
1. I need to collect your personal information about your health in order to provide you with the best possible treatment. Your request for treatment and my agreement to provide treatment constitutes a contract. (You can choose not to provide that information, but if so I would not be able to provide treatment).
2. I have a "Legitimate Interest" in collecting that information to allow me to do my job safely and effectively.
3. It is important that I am able to contact you about your appointment and health care. This constitutes your "Legitimate Interest".
4. If I have your consent I may occasionally send you general news and health information in the form of specific advice or a general newsletter. You may withdraw consent to this at any time.
I have a Legal Obligation to retain your records for a minimum of 8 years after your most recent appointment (or age 25 if longer). After this period of time you may contact me, with photo ID, and ask me to delete your records. Otherwise, I will retain your records indefinitely in case you should return for treatment at a future date allowing me to provide the best possible care.
I will never share your medical data with anyone else without your permission. (The only exception to this is where I consider you or another is at serious risk and I may need to contact your doctor or appropriate authorities for your or their safety). Your medical data may occasionally be used for educational purposes or for internal clinical audit. If so the data will be anonymised. Your personal contact details are held by reception (and on my mobile phone, email account etc, where it has been necessary for me to contact you direct, these are password protected) in order for them to provide reception services.
You have the right to see what personal data I hold about you and ask for me to correct any factual errors. If you wish to know the specific details of the security measures in place, or have any other questions, please contact me direct.
Any complaints about data should be sent direct to me Louise Megan Owen as the data controller.