Below is privacy policy has been drafted for Smallbridge Clinic, Rochdale, UK. This policy is designed to comply with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
.
Introduction
Smallbridge Clinic Limited is committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard the personal information you provide to us, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
1. Information We Collect
We may collect and process the following data:
- Personal identification information: Name, address, phone number, email address, date of birth.
- Health information: Medical history, current health status, test results, prescriptions, treatment records.
- Payment information: Credit/debit card details, billing address, payment history.
- Communication data: Emails, phone calls, and other communications you have with us.
2. How We Use Your Information
We use your personal data to:
- Provide you with healthcare services.
- Manage your medical records.
- Schedule appointments and send reminders.
- Communicate with you regarding your care.
- Comply with legal obligations, such as reporting requirements.
3. Legal Basis for Processing
We process your personal information based on the following legal grounds:
- Consent: Where you have given us explicit consent to process your data.
- Contractual necessity: To provide healthcare services as per our agreement with you.
- Legal obligation: To comply with applicable laws and regulations.
- Vital interests: To protect your health and safety.
- Public task: Processing necessary for public health interests.
4. Data Sharing and Third Parties
We may share your data with:
- Other healthcare providers involved in your care.
- Laboratories, pharmacies, and other third parties to facilitate your treatment.
- Legal or regulatory bodies when required by law.
We do not sell, rent, or lease your personal information to third parties.
5. Data Security
We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. All data is stored securely in compliance with NHS Digital’s guidelines.
6. Data Retention
We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal and reporting requirements. Medical records are typically retained for at least 8 years after the last patient interaction, or longer if required by law.
7. Your Rights
You have the following rights regarding your personal data:
- Access: Request access to your personal data.
- Correction: Request corrections to any inaccurate or incomplete data.
- Erasure: Request the deletion of your data (subject to legal exceptions).
- Objection: Object to certain types of data processing.
- Data portability: Request a copy of your data in a structured, commonly used format.
To exercise any of these rights, please contact us at Contact us.
8. Changes to This Privacy Policy
We may update this policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you via email or other means.
9. Contact Information
If you have any questions about this privacy policy or how we handle your personal data, please contact us at:
Smallbridge Clinic Limited
21 Stevenson Square
Rochdale OL12 9SA
01706-587736