(General Data Protection Regulation)
Since this is a small clinic, we have not appointed a Data Protection Officer; the clinic management are responsible for the GDPR in relation to the running of the clinic; if you have any queries about any aspect of this policy, please speak with us.
GDPR and privacy at the clinic is divided into 3 parts:
1. Individual practitioners. They are responsible for GDPR for their own private work as independent self-employed practitioners; they make their own contracts with their clients/patients. The full details of your practitioner’s GDPR policy should be shared with you when you start to see him/her or will be available on their own website.
2. Practitioner’s details. The clinic holds details about the practitioners and employees who work here; this is covered by a separate GDPR agreement with each practitioner and employee.
3. The Beacon Clinic Management does not collect patient data relating to patients attending the clinic to see practitioners. It does, however, handle data relating to you, should you contact us through:
a. Phone messages
b. Direct contact with the clinic management regarding any queries about your experience at the clinic.
c. Social media platforms. Any comments left on social media are considered the responsibility of the individual posting to that platform. Any reviews given to the clinic directly will only be shared anonymously.
The following information is in relation to section 3 a. and b. above:
Information we may hold about you should you contact the clinic directly
Your name, contact details, nature of the contact and outcome
Why do we collect this?
To pass on information at your request.
To enable the clinic management to address any queries
How long do we keep this information?
Data is kept for the shortest time possible to fulfil your request.
Practitioners have a legal obligation to retain your records for a minimum of 8 years after your most recent appointment (or after you have reached age 25, if this is longer) but, after this period, you can ask your practitioner to delete your health records if you wish. If the contact is relating to your treatment at the clinic, then we would keep this information under the same requirement. The directors may be required to process data to protect the vital interests of patients if there is an allegation of a practitioner’s behaviour being potentially harmful to a patient. In this extreme situation then the directors would need to disclose information if requested by legal investigators.
Data may be in handwritten format, or email. We are committed to keeping your information secure through our clinic security procedures, limited access to records in the building and by online computer security.
Controlling your personal information
Personal information shared with the directors or clinic management is not shared with third parties without your express permission or if required by law.
Under GDPR, you have the following rights regarding your personal information:
Right of access – if you want to see the information we are storing about you can contact us and we will make this available as soon as is practical, at the latest, within 30 days.
Right to correction – if you believe that any information we have is incorrect or incomplete, please contact us and we will make appropriate amendments.
Right to erasure – if you want to remove personal data from our records, you can contact to request this. We will remove data, within the limitations of what we are required to retain for legal and GMC requirements.
Right to complain – if you are unhappy with how we are managing your personal data please contact us to discuss this and we would aim to resolve any concerns in person. If, however, you feel concerns are not resolved you can contact the UK supervisory authority, the Information Commissioner’s Office (ICO).
BEACON CLINIC COMPLEMENTS and COMPLAINTS
We welcome you sharing positive feedback from which we can learn.
In the event of you being unhappy with your treatment at the Beacon Clinic, we would suggest that you discuss this with your practitioner, in the first instance. We would expect your practitioner to want to know your concerns and to address them with you.
If you wish to raise a matter further with the clinic management, please speak to the directors/management; your suggestions or complaints will be taken seriously. Since we wish to learn from your experiences and would wish to see how improvements could be made, hopefully any concerns will be addressed to your satisfaction. If not, please speak to us for details of our complaints procedure.