Privacy Policy

We are committed to protecting the privacy of all individuals that provide personal information to us. We understand the importance of ensuring that the personal information entrusted to us is protected and respected, and we therefore treat personal data in accordance with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, in addition to our clinical confidentiality requirements. We may review and change this policy from time to time.

This privacy policy sets out the basis on which any personal information we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal information and how we treat it.

The Personal Information We Collect

We may collect and process the following personal information. Note that without your consent for this, we will be unable to provide treatment or respond to your enquiry.

Medical Records — Information collected as part of your registration with the practice. This will include but is not limited to your name, address, date of birth, email address, phone number, next of kin and medical history.

Enquiries — We may record your details in order to track and follow up on enquiries, in addition to scheduling appointments. This includes information such as your name, reason for enquiring, and contact details.

How We Use Your Information

When you provide us with personal information, the purpose for which you are providing it will always be made clear. We may use this information for some or all of the following reasons:

• To provide you with the information, treatments and services that you request from us.
• Internally, to inform decisions about our business operations and strategy.
• To notify you about changes to our service.
• To send you email notifications to remind you of any appointments and treatments booked with us.
• To contact you for post-treatment follow-up and care.
• To remind you by email to book subsequent appointments for a treatment you have previously had which requires ongoing review.
• With your consent, to send you relevant information and updates by email.
• To tailor the content of our communications to make it more relevant to you.
• For business performance analysis, to ensure we continue to provide the best service.
• To make sure we are speaking to the right person and to help prevent and detect fraud.
• To take payment and process refunds.
• To provide customer service and support.

Who We Share Your Personal Data With

We take our obligations under the UK GDPR and our clinical confidentiality requirements very seriously. Sensitive information relating to your medical history will be kept confidential and will only be disclosed to the individuals involved in delivering your treatment.

Selected third parties may be involved in delivering your care, such as hospital providers at Spire Leicester, Nuffield Leicester, and Spire Nottingham. Opting out of sharing your information with these providers may affect our ability to treat you.

There may also be circumstances where we are under a duty to disclose your personal information in order to comply with any legal or regulatory requirement or obligation, including to the police for the prevention or investigation of a crime, or to our insurers, legal advisors or other third parties who need access to it in the context of managing, investigating or defending claims or complaints.

Website Analytics

We use Google Analytics to understand how visitors use our website. This service uses cookies to collect information about your browsing behaviour on our site in an anonymised form. For further information, please see our Cookie Policy.

Your Information

We cannot guarantee that information you send us over the internet is secure. Once we receive it, we will take all reasonable steps to protect the information you supply to us.

We align our retention periods for the storage of patient information and records to the NHS Records Management Code of Practice. Backups of electronically stored data are taken regularly, with strong encryption used to protect all files.

Your Rights

You have the right to ask us not to process your personal information. Where consent is withdrawn for the processing of personal data from your medical records, our ability to continue your treatment will be impaired.

In some circumstances, you have the right to be forgotten and we will erase all data held about you. Medical records are exempt from erasure before our maximum retention periods.

Requests for erasure should be made in writing to:

All requests will be assessed on a case-by-case basis.

Access to Information

The UK GDPR gives you the right to access information held about you. Any requests should be made in writing to the Practice Manager at the address above. All requests will be subject to the appropriate identification checks.

Contact and Complaints

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to:

Email for privacy questions and requests: pa@nakulpatel.com

You have the right to complain to a supervisory authority if you feel that we have breached the terms outlined in our Privacy Policy. Complaints can be made to:

Further information can be found at ico.org.uk

See also our Cookie Policy.