Exit siteExit site
This is how we collect and use your personal information.
It applies to all the information we collect about you when you come to us for care or treatment.
Parts of this notice also apply to you if you:
The Care Act 2014 requires us to keep records of your care and treatment that you receive.
We collect your personal information to:
We need accurate and up-to-date information about you to:
All the data we collect about you, including information about your care, are saved safely and securely in our records.
Your records are available to our clinicians to view when you:
We may use your information to make our services better for everyone through research and planning.
This usage is sometimes referred to as secondary purposes.
Normally when we share or use data for planning or research purposes your personal information is removed (anonymised) so you can not be identified from any information provided.
Your anonymised data helps us to:
The type of information we collect from you includes:
(Sometimes referred to as special category information)
We collect information about you if:
We will always process your personal information lawfully and fairly. We are governed by the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR).
Under DPA 2018, we need a legal basis to process (or use) your information.
We do not always rely on your prior consent to use your information because there are rules in articles six and nine of DPA 2018 that allows us to process your information:
Allows us to use your personal data as it is necessary to perform tasks in the public interest of our official functions, where a task has a clear basis in law.
Allows us to use your sensitive data for the provision of health, social care, or treatment, or the management of health or social care systems and services under the Health and Social Care Act (2015)
We need your express permission to collect personal data from you for non-direct healthcare purposes.
Only allows us to process your personal data if you have given explicit consent.
Only allows us to process special category data if you have given explicit consent.
We may share your information with other healthcare professionals and organisations.
This may include, but is not limited to:
We may also share information with the police and other law enforcement agencies where we need to:
We may share your confidential personal information with clinical research bodies.
Each clinical research body has to get approval from the NHS Health Research Authority’s Confidentiality Advisory Group (CAG) to request and use your information.
If you’re happy for us to share your information, you don’t need to do anything.
However, if you don't want your information to be used for research purposes, you can opt out.
To opt-out:
We’ll record your decision in your files, so your information won’t be shared for other purposes unless we’re legally obliged to do so.
You can change your mind at any time.
We don’t routinely send data out of the UK.
However, if we ever need to transfer your personal data to an organisation based overseas, we will tell you first.
To keep your data safe, we will consider if we can make the transfer without including your personal information.
Everyone has the right to access care and treatment without fear of violence or abuse, including our staff.
We may record your calls for the purposes of:
As per your subject access rights, you’re entitled to a copy of the recordings.
We use CCTV and body warn cameras to prevent and detect crime.
You’ll see signs and posters in the areas we use CCTV.
As per your subject access rights, you’re entitled to request recordings of yourself subject to exemptions.
You are not entitled to data that includes third party information.
Our car parks are managed by APCOA.
APCOA will collect information about your vehicle on our behalf. We use this information to improve our car parks, and improve traffic flow through our sites.
We can stay keep you up-to-date about your care or treatment in various ways:
You can choose how you’d like to be contacted, and we’ll record your preference. Not all methods will be available for all purposes.
Please keep your contact details up-to-date.
We carry out data impact assessments (DPIA) when planning new systems and processes that involve:
Email our data protection officer to request copies of our DPIAs.
Our information security and data protection policies are in place to protect your privacy and confidentiality.
Our networks and digital storage are encrypted to stop unauthorised access, hacks, cracks, and loss.
Access to our systems is restricted to roles who have specific duties and responsibilities to use these systems and we regularly undertake system audits to ensure our controls are fit for purpose.
Any third parties we use to support our services with access to your data, will be defined as a data processor, and are legally and contractually bound to operate in a safe and secure manner.
We keep all data in accordance with our health records policy and retention schedule.
These documents conform to the Record Management Code of Practice 2020
Typically, the retention periods are: