Why the practice collects your personal data and what is done with it.
When you provide your personal details at the practice, this information is stored in order to comply with the GDPR. The reasons why personal details areas taken are the following:
Personal information regarding your health helps to provide the best treatment possible. Your request for treatment and my agreement to provide care constitutes a contract. You may, of course, refuse to provide the information, but if you were to do so, I would be unable to provide treatment. I have a “Legitimate Interest” in collecting that information because without it I could not do my job effectively and safely.
The practice has a legal obligation to retain your records for 8 years after your most recent appointment (or age 25 in the case of patients under 18 when treated). However, after this period, you can ask that your records are deleted if you wish.
Your records are stored:
On paper, in locked filing cabinets and the practices’ are always locked out of working hours.
Your details will never be shared with any third party without your written consent.
You have the right to see what personal data of yours I hold in my practices at any time you wish, and you can also have any factual errors corrected. Provided the legal minimum period has elapsed, you can also ask that your records be destroyed.
Your personal data is absolutely confidential and is treated responsibly.