Data Protection &
Privacy policy.
In providing your treatment, Dr. Lucy Middlefell asks for information about you and your health. Occasionally, she may receive information from other providers who have been involved in providing your care. This privacy notice describes the type of personal information she holds, why she holds it and what she does with it.
Information that she may collect:
Personal details such as your name, date of birth, national insurance number, address, telephone number and email address
Information about your general health, including,
Medical History and Clinical Photographs
Treatment plans and consent
Notes of conversations with you about your care
Dates of your appointments
Details of any complaints you have made and how these complaints were dealt with
Correspondence with other health professionals or institutions
Details of the fees she has charged, the amounts you have paid and some payment details
Dr Lucy Middlefell is responsible for keeping secure the information about you that she holds. As the Data Protection Officer, she also ensures that she complies with data protection requirements to ensure that she collects, uses, stores and disposes of your information responsibly.
How she uses your information
To provide you with the treatment that you need, she requires up-to-date and accurate information about you.
She will seek your preference for how to contact you about your care. Usual methods are telephone, SMS, email or letter.
She may use your contact details to inform you of products and services available.
Sharing information
Your information is normally used only by Dr Lucy Middlefell but there may be instances where she needs to share it – for example, with:
Your doctor
The hospital or community services or other health professionals caring for you
She will only disclose your information on a need-to-know basis and will limit any information that she shares to the minimum necessary.
In certain circumstances or if required by law, she may need to disclose your information to a third party not connected with your health care, including HMRC or other law enforcement or government agencies.
Keeping your information safe
She stores your personal information securely on a computer system and sometimes in a manual but lockable filing system. Your information cannot be accessed by anyone other than Dr Lucy Middlefell. She has a legal responsibility to maintain confidentiality.
She will keep your records for 10 years after the date of your last visit or until you reach the age of 25 years, whichever is the longer.
Access to your information and other rights
You have a right to access the information that she holds about you and to receive a copy. You should submit your request to Dr Lucy Middlefell in writing or by email. There is not usually a charge for copies of your information; if there is, she will explain the reasons.
You can also request that she:
Correct any information that you believe is inaccurate or incomplete. If she has disclosed that information to a third party, she will let them know about the change
Erase information she holds although you should be aware that, for legal reasons, she may be unable to erase certain information (for example, information about treatment)
Stop using your information – for example, sending you reminders for appointments or information about her services
If you do not agree
If you do not wish Dr Lucy Middlefell to use your personal information as described, you should discuss the matter with her. If you object to the way that she collects and uses your information, she may be unable to continue to provide your care.
If you have any concerns about how she uses your information and you do not feel able to discuss it with Dr Lucy Middlefell, you should contact: The Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF (0303 123 1113).
