Privacy Policy Notice to Patient
This privacy notice sets out how TRUST uses and protects any information your provide.
TRUST is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using our services then, you can be assured that it will only be used in accordance with this privacy statement.
The legal rights regarding privacy are set out by the ICO and are found here [LINK]
We may collect the following information:
- Personal data about you and the background to your current situation
- Personal health related data regarding your past, present and future needs. This may include physical, cognitive, environmental, social and behavioural information
- Further information may be provided by other professionals involved in your care, such as your GP or a referring source.
We gather this information for the purposes of:
- Providing you with our expert clinical services.
Without this information
- We will be unable to provide services to assist you.
Who we share your data with
- We will only share information to other parties with your explicit consent.
We do not share your personal data unless there are concerns related to other areas of the law for example. safeguarding, criminal activity etc are considered to be in the public interest or vital interest of the data subject and do not require consent.
All healthcare professionals have a duty of confidentiality and as such will obtain your consent to undertake the assessment and collect your personal data.
Lawful basis of processing
As we are processing sensitive data related to your health TRUST is required to set out two lawful processes, (one from Article 6 and one from Article 9 of the General Data Protection Regulations 2016) by which we do this.
Consent can be withdrawn at any time by advising TRUST via email via the link on our website.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have in place a system of encryption for data that is sent out and management procedures to safeguard and secure the information we collect.
Data Retention
Based on the Limitation Act 1980 your personal data will be held for a maximum of 7 years following your appointment. TRUST complies with the Records Management: NHS Code of Practice which specifies the length of time health records should be kept, dependent on the type of record held. After this time your personal data will be securely destroyed.
Your rights under the General Data Protection Regulations 2016
The right to be informed
You have the right to be informed about what data is being collected, how and why it is being used and any 3rd parties that rely on the information.
The right of access
You may request details of personal information which we hold about you. In these circumstances we will refer you to the instructing solicitor as it will affect the legal process
The right to rectification
If you believe that any information we are holding on you is incorrect or incomplete, please advise your solicitor as soon as possible. We will promptly correct any information found to be incorrect.
The right to erasure
Where the data we hold is not required for legal or medical record keeping you may request that it is erased.
The right to restrict processing
If you believe the data we are processing is incorrect you may request that the data is no longer processed until corrected.
The right to object
You have the right to object to the processing of your data and we would then liaise with your solicitor for instructions on how to proceed.
