Privacy notice/Data Protection GDPR to patients

From May 2018, in compliance with the General Data Protection Regulation (GDPR), each patient having an appointment will be asked to consent to processing and storing their data, including the right of the clinic to contact the patient via phone, SMS, e-mail (including sending newsletters) or by post. The patient has a right to object to us using their personal contact details. Please note that this, however, will result in:

• the clinic being unable to contact the patient to change, confirm or cancel appointment
• the doctor being unable to contact the patient to discuss the test results or answer patient’s query
• the clinic being unable to send laboratory test results
• the clinic being unable to send newsletters to inform about our new services or exclusive offers
• the clinic being unable to send invoices for service received at the clinic
• the clinic being unable to send medical reports, medical documentation, treatment plans
• the patient being unable to use our credit facilities
• the patient being unable to book an appointment via our website

Confidentiality

All information given will be kept confidential. No personal details will be passed on to third parties nor shared with companies / people outside of the company other than our subcontractors doctors working on a self-employment basis.

Clients/patients have the right to be forgotten. If an individual makes a written request to be forgotten, we must remove all data from our databases, which processes are handled by our manager.

Please note that we will be unable to erase client medical records, which are required as evidence of our clinical practice.

We will however, be able to delete individuals personal data from any email correspondence, booking and contact form data such as name, email, phone, DOB, contact message.

Calls may be monitored and recorded for record-keeping, training and quality-assurance purposes. You may, however, object to your conversation being recorded by informing our receptionist at the beginning of the conversation.

We comply with the following laws:

• The General Data Protection Regulation (GDPR)
• Regulation of Investigatory Powers Act 2000 (“RIPA”)
• Telecommunications (Lawful Business Practice)(Interception of Communications) Regulations 2000 (“LBP Regulations”)
• The Employment Practices
• Human Rights Act 1998