What is Personal Data?
Personal data is information relating to an identified (or identifiable) person for example, an individual’s name, address, age, date of birth, gender and contact details. Personal data relating to (but not limited to) an individual’s health is considered a ‘special category’.
Chiropractors and Administration staff in this clinic make appointments, provide you with care, maintain records about your health and any treatment, or care, you have received previously (e.g. from the NHS).
Our records may be electronic, on paper or a mixture of both and we use a combination of working practices and technology to ensure that your information is kept confidential and secure.
What Personal Data Do We Collect?
Records this Practice hold about you may include the following information:
- Details about you, such as your address, contact details, previous medical history and previous investigations
- Any contact with the clinic has had with you, such as appointments, clinic visits, advice given over the phone or email, emergency appointments etc.
- Notes about your and/or your child’s health
- Details about your and/or your child’s treatment and care
- Relevant information from other health care professionals, relatives or those who care for you
- Results of investigations such as laboratory tests eg x-rays, MRIs
Why Do We need Your Personal Data?
These records are used to help provide you with the best possible healthcare.
Information may be used to protect the health of the public and to help us manage the practice. It may be used within the practice for clinical audit to monitor the quality of the service provided. Sometimes your data may be requested for research purposes – the practice will always gain your consent before releasing any information for this purpose.
The retention of data may be necessary where required for contractual, legal or regulatory purposes or for our legitimate business interests and apply irrespective of the form in which the records are held. We will retain your medical records to meet these requirements and for the protection of patients and practitioners by providing a history of healthcare received/delivered.
How Do We Keep Your Records Confidential?
We are committed to protecting your privacy and will only use information collected lawfully in accordance with:
- General Data Protection Rules 2018
- Human Rights Act 1998
- Common Law Duty of Confidentiality
- General Chiropractic Council Code of Conduct
All chiropractors at Abacus Clinic and Administration Staff have a legal and ethical obligation to maintain records safely, securely and confidentially.
We will not disclose information about you to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations) or where the law requires information to be passed on.
We will take all appropriate technical and organisational steps to protect the confidentiality, integrity, availability and authenticity of your data.
Who Might We Share Your Data With?
- NHS Trusts/Foundation Trusts
- Independent Contractors such as those who provide imaging services (eg MRI, x-ray
- Other data processors which you will be informed of
You will be informed who your data will be shared with and may be asked for explicit consent for this to happen.
Access To Your Personal Information.
You have a right (known as ‘Individual Rights’) under the General Data Protection Rules 2018 to request access to view or obtain copies of what information Abacus Chiropractic Clinic holds about you and to have it amended should it be inaccurate.
- Your request must be made in writing to the clinic
- You will need to give us adequate information (name, address date of birth) and proof of name (Photo ID) so that your identity can be verified.
- We are required to respond to you within 40 days
- There is no charge for copies of your file
In exercising your individual rights, you should understand that in some situations we may be unable to fully meet your request, e.g. if you make a request for us to delete all your personal data, we may be required to retain some data for taxation, prevention of crime and for regulatory and other statutory purposes.
Should you have any concerns about how your information is managed at the clinic, please contact The Duty Chiropractor in the first instance. You can also email email@example.com.
If you are still unhappy following a review by Abacus Clinic, you can then complain to the Information Commissioner’s Office via their website (www.ico.gov.uk) or by calling their helpline on 0303 123 1113
Change of Details
It is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details such as date of birth is incorrect in order for us to correct it.
Deirdre Edwards is registered with the Information Commissioner’s Office as the Data Controller for Abacus Chiropractic Clinic.
How To Contact Us
If you have any questions regarding this Notice, the use of your data and your individual rights, please contact us on 01789 294313 or firstname.lastname@example.org