Privacy Policy

Privacy Policy

What data do we hold about you ? 

• Name, address, date of birth.
• Referrer details: self-referred / GP / Friends & Family / Work Doctor
• GP name and address and consent to share information
• Details of how you will pay for the regulated activity
• How you heard of us.
• Whether we can send you emails and SMS appointment reminders
• Your mobile phone number
• Home / Work telephone contacts
• Your preferences for services  ; clinic location, time of day.
• Consent to treatment 
• Consent to information sharing
• Agreement to marketing and newsletters
• Information about the Regulated Activity of Psychiatric and Psychological services.

Why do we process it ?

• Help our services deliver more useful interventions
• Improve the quality of our service and develop new ones
• Conduct analytics for regulation, quality improvement and to understand how you use our services
• We are processing your data in order to provide the regulate

We are processing your data in order to provide the Regulated Activity of Psychiatric Treatment of Disease, Disorder or Injury.  Processing your data is necessary to provide you with a safe, caring, responsive, effective and well-led service as regulated by the Care Quality Commission.

You can control how we use this information and will be given the option to outline your preferences via our registration and control form which you will complete prior to receiving treatment.  We are working to develop electronic systems to enable you to change your settings/preferences online.  

How long do we retain them for?

Records relating to psychiatric treatment of Disease, Disorder or Injury are retained from 20 years from last contact, or 8 years from the death of the patient.

We hold a registration with the Information Commissioners Office as Data Processors: Z2016099 and you have a right to complain to them if you think there is a problem with the way we are handling your data. 

Our Data Controllers are working towards ISO27001 Certification Information Security Management Standard and are currently provided to the practice by Midex Pro, 66 Basepoint Business Centre, Rivermead Drive, Swindon, SN5 7EX, tel: 0330 999 3399 

www.midexpro.com

Our email and webbrower services are currently has a Secure Socket Layer SSL encryption certificate.

If you make payments via the website, it is provided by Paypal.

Your rights under the General Data Protection Regulation (GDPR) (EU) 2016/679

• Rights to be informed how you / your children's data will be used
• Rights of access
• Rights to rectification and Data Quality
• Right to erasure including retention and disposal
• Right to restrict processing
• Right to data portability
• Right to object
• Rights to automated decision making including profiling