Privacy policy & GDPR

General Data Protection Regulation (GDPR) is a new regulation which is intended to strengthen and unify data protection for all individuals. In accordance with GDPR guidelines, safeguards are in place to protect your privacy and ensure that you feel confident about the security of the personal data which you provide.

Data Protection Privacy Notice

Under Data Protection Laws, your personal information can only be processed where there is a proper reason for doing so, such as:-

• it is in the legitimate interests of the medical team – for example to enable a consultant to provide treatment or care and order medical tests

• if required by law i.e a legal obligation

• if you have entered a contract for a service – for example processing of payment

• in the public interest – where this has a clear basis in law

• vital interests – for example protection of life in a medical emergency

Personal data collected may include:-

• Patient’s name

• Title

• Date of birth

• Address

• Health+Care Number

• Contact telephone number

• GP name & address

• Private health insurance company, account number and authorisation code

• Medical records of your current appointment and previous medical history

• Email address

The personal data held on file may be shared with:

Consultants, medical teams and GPs with whom the patient is attending

The Medical Insurance Company with whom the patient is insured

The Private Healthcare Information Network

Why is data collected and who are the recipients of the data?

Data is collected to provide details to the Consultant in charge of your care and to enable the Consultant to provide continuing care via your General Practitioner.

Health insurance data is collected for the purposes of payment of your medical bills.

How long will the data be retained?

Data will not be retained for any longer than is required.

Individual Rights under GDPR:

You have a number of rights under the Data Protection Laws in relation to the way we process your personal data, which are set out below.

1. Right to be Informed – This is provided through the privacy notice on our website.

2. Right of Access – You have the right to access your personal data and supplementary information. We will aim to respond to any reasonable request received from you within one month, although this may be extended in some circumstances in line with Data Protection Laws. If you wish to obtain access to your file, you must write to us at the address below. Access to your data will usually be provided free of charge, although in certain circumstances we may make a small charge where we are entitled to do so under Data Protection Laws.

3. Right to Rectification – The right to ask us to correct your information if you think the information that we hold about you is wrong or incomplete. We will respond within one month.

4. Right to Erasure – The right to object to our use of your information, or to ask us to delete, remove or stop keeping it if there is no need for us to keep it. This is known as the ‘right to object’, the ‘right to erasure’ or the ‘right to be forgotten’. There may however be legal or regulatory reasons why we need to keep or use your information.

5. Right to Restrict processing – We may sometimes be able to restrict the use of your information so that it is only used for legal claims or to exercise legal rights. In these situations, we would not use or share your information while it is restricted.

6. Right to Data Portability – The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.

7. Right to Object – Individuals have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority. There is a contractual requirement when patients attend Hillsborough Private Clinic for their personal data to be processed in order to provide medical care and treatment. You may object to the use of your personal data being given to the Public Healthcare Information Network – this can be anonymised and is provided for in the theatre admission process.

8. Right not to be evaluated on the basis of automated processing – Patients who attend Hillsborough Private Clinic will not be evaluated on the basis of automated processing nor is any decision making automated.

Links from this website

This website may contain links to other websites. If you provide personal/sensitive data to a website linked to this we are not responsible for its protection and privacy. This privacy statement only applies to www.heartconsultants.co.uk

Contact details

If you wish to exercise any of the above, please write to:-

Data Protection Officer

heartconsultantsni@gmail.com