One Stop Musculoskeletal Ltd Patient Privacy Policy and Notice
The information that we collect
One Stop Musculoskeletal Ltd collects data/information about you, such as your basic details (name, address, date of birth), details about what you tell us is wrong with you, the treatment we provide and other relevant information to your treatment and care. The data/information is recorded either on paper or electronic format. We take our duty to protect your data/information and confidentiality very seriously and we are committed to taking all reasonable measures to ensure the confidentiality and security of your data/information for which we are responsible.
We are required by law to provide you with information in the following 9 subsections:
1. Who we are
One Stop Musculoskeletal Ltd a specialist healthcare provider providing musculo-skeletal care, registered with the Information Commissioner’s Office to process personal information under the Data Protection Act 2018
Our registration number is ZA475515
Our address is:
2 Paddock Mews,
Kirmond Road,
Binbrook,
Lincolnshire, LN8 6DS.
2. Data Protection Officer
Richard Craig
3. Why we collect personal information about you
One Stop Musculoskeletal Ltd collects data/information to:
· ensure you get appropriate treatment
· ensure information is available to guide future treatment
· investigate complaints, legal claims or untoward incidents.
4. Lawful basis for processing
The processing of personal data in the delivery of health care is supported under the following Article 6 and 9 conditions of the GDPR:
Article 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.
Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...”
We will also recognise your rights established under UK case law collectively known as the “Common Law Duty of Confidentiality”
5. Who we share your personal information with
Relevant parts of the data we collect from you will be shared with your GP unless you specifically request us not to share the information. With your consent we may also pass on your data/information to other individuals or organisations involved in your care. We only pass on information about you if there is a genuine need to know, and anyone who receives the information is also under a legal duty to maintain confidentiality under Health and Social Care (Safety and Quality) Act 2015.
We will not give out your information to third parties except under exceptional circumstances, such as where the law requires us to do so.
6. Right to object
You have the right to object or restrict the processing of your data/information. Should you wish to exercise this right, please inform our Data Protection Officer at the above address.
7. Right to access and correct
You have the right to access your data/information that we hold about you and have any inaccuracies corrected. If you would like to request a copy of your data/ information, please contact our Data Protection Officer at the above address to obtain a Subject Access Reuquest Form.
8. How long do we retain your information?
Your data will be retained for a minimum of 7 years in line with the NHS Health and Social Care Records 2016 – Retention Schedule.
https://digital.nhs.uk/article/1202/Records‐Management‐ Code‐of‐Practice‐for‐Health‐and‐Social‐Care‐2016
9. Right to Complain
The Information Commissioner’s Office (ICO) is the body that regulates “Data under Protection and Freedom of Information” legislation. If you are not satisfied with our response or believe that we are processing your personal data not in accordance with the law you can complain to the ICO at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
https://ico.org.uk/global/contact-us/
Tel: 0303 123 1113 or 01625 545 745