BEVIS NATHAN ASSOCIATES & NATHAN JENSEN CLINIC PRIVACY POLICY
Nathan Jensen Clinic.
A: 14 Queen’s Square. Bath. BA1 2HN.
T: 01225 311112.
E: info@nathanjensenclinic.com
This privacy policy sets out how and why we use the information you provide.
The purposes of our processing and what information we hold:
Our health care professionals who provide you with care maintain records about your health and any treatment or care you have received previously, based on what information you provide at your appointments, as well as details of the treatment they have provided. These records are used to help to provide you with the best possible healthcare.
We collect and store your personal information, including your name, date of birth, telephone number, email address, and home address on our online booking system in order to be able to contact you and in compliance with lawful regulations. Email addresses are used to contact you about appointments or treatments. We also send automated appointment confirmation at time of booking and for appointment reminders. We will never use your email address for marketing or promotion.
Your records:
Health care records are on paper and manually filed in a locked and alarmed room. Records the Nathan Jensen Clinic holds about you may include the following information;
• Details about you, such as your name, address, date of birth, email address
• Any contact the clinic has had with you, such as appointments.
• Notes and reports about your health, treatment provided, and progress of treatment
• Details about your treatment and care, and conversations had during appointments.
• Results of investigations such as laboratory tests, x-rays, etc.
• Relevant information from other health professionals, relatives or those who care for you
Lawful bases for processing:
The lawful bases for processing are set out in Article 6 of the GDPR . The Nathan Jensen Clinic’s lawful basis for the processing under the General Data Protection Regulation is your consent for us to process your data under the terms stated in this privacy policy.
Because we deal with sensitive health care information our privacy policy also contains a special category data, which is: explicit consent.
Explicit consent provides a firm basis for us to retain your data, even if you subsequently object.
The retention periods for the personal data:
The Nathan Jensen Clinic is required to retain your records even after your treatment has ended. This is in case you choose to resume treatment in the future, in order to comply with statutory regulations and for the purpose of defending potential legal claims.
We will retain your records for a minimum of 8 years for adults and 25 years for children, usually we will retain your records for longer than this. Under article 17.3 (e) we can and will retain your data even if you request for erasure.
Sharing your information:
We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations), where the law requires information to be passed on or if your practitioner believes you to be at risk of injury or of injuring others, s/he will tell you that s/he intends to inform another party (eg your GP) so that you have the option of informing that party yourself.
In all other cases we do not share your information with third parties, unless in the circumstances of claiming for appointments through insurance companies, and upon your specific request.
Your right to withdraw consent:
When making first contact, over the phone, via email or in person, you have the right to to refuse providing us with the information we ask for. However, this would most likely mean that we would not be willing to see you for first consultations or provide you with treatment. If you object after we have already processed your information, we retain the right to retain all the information we have already processed.
Your rights include :
-
The right to be informed
-
The right of access
-
The right to lodge a complaint with a supervisory authority.
You have a right to request access to view or to obtain copies of what information we about you. You can request to have information amended should it be inaccurate. This does not include amendment of notes made on your treatment or our practioners’ comments on your health.
How to request access:
• Any requests must be made in writing.
• We are required to respond to you within 40 days
• You will need to give adequate information (for example full name, address, date of birth, and details of your request) so that your identity can be verified and your records located
Change of Details
It is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details such as date of birth is incorrect in order for this to be amended. You have a responsibility to inform us of any changes so our records are accurate and up to date for you.
Changes to the information
We regularly review and, where necessary, update our privacy information.
If we plan to use personal data for a new purpose, we update our privacy information and communicate the changes to individuals before starting any new processing.
Should you have any concerns about how your information is managed, please contact us.