Privacy Notice
About Chequers Health Group
Chequers Health Group is a healthcare organisation led by GPs and Consultants to support the NHS in the provision of healthcare in a community setting. We provide services both to the NHS and the private health sector by delivering speedy diagnosis and high-quality patient care creating greater choice for the patient and care closer to home.
Introduction
This privacy notice allows you to understand what happens to your personal data that (1) you share with us, (2) information we receive from other organisations about you and (3) information that we may collect from you.
At Chequers Health Group we promise to respect your privacy and look after the personal data you share with us both directly and that which we may get from other organisations. We will keep it safe and will not share it with third parties unless they are contracted to work for us to deliver a specific service for your benefit, or we have your consent to share or we are required to do so by Law or Court Order.
As an organisation we are committed to protecting and respecting the confidentiality, integrity and security of personal information about individuals whose data we hold and do so in line with the UK Data Protection Act 2018 and the General Data Protection Regulation (GDPR) (EU) 2016/679.
Data Controller and Data Protection Regulation
For the purposes of the Data Protection Act 2018 and the General Data Protection Regulation (Regulation (EU) 2016/679) (together, the data protection legislation), Chequers Health Group is the data controller of your personal data. Please follow the link below to view our registration: https://ico.org.uk/ESDWebPages/Search
The type of personal information we collect
We may collect the following information from you:
- Personal contact details (including, name, address, contact number, mobile and or landline and e-mail address
- Date of birth
- Emergency contact details such as, next of kin, carer or legal representative
- Dr and or consultant details
- Healthcare reports/test results, (Blood test and scans)
- Details about your treatment
How we get your personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- To enable us to provide you with a convenient appointment and allow us to maintain regular communication
- To support our healthcare professionals with relevant information for your consultation for them to give quality and safe clinical advice.
We also receive personal information indirectly from the following sources and in the following scenarios:
- Healthcare records from General Practitioners (Your GP) and healthcare professionals (eg. Consultants)
- Diagnostic information such as blood tests results, scans result etc. that may be provided by your hospital or referring consultant.
We use the information you have given us to:
- Ensure we provide the best care and treatment possible
- Inform service improvements
- Support audit processes for our registration with governing bodies such as the Care Quality Commission (CQC) and NHS England/Improvement (NHSE/I)
- Review patient queries and complaints
- Support ligation claims
- Support and maintain professional development/training of our clinical and non-clinical workforce
- Support research and development
If you wish your information not to be used for research and development and training, you have the right under GDPR to opt out. Please contract us via [email protected] should you wish to opt out.
We may share your information with the following organisations for healthcare purposes:
- General Practitioners (your GP
- Referring consultants from hospital Trusts
- NHS providers who are directly involved in your care/ treatment plan
There may be occasions where we need to share your information with non-NHS organisations such as Social Services however, we will not share any of your confidential information without your consent.
Furthermore, there may be instances where we are asked to share limited information such as name and address from third party organisations in compliance with their statutory duties, this Notice is assurance that we will not share any health record information. However, instances where we are unable to obtain your consent, we are duly informing you via this Notice, which is in line with GDPR and known as a fair Processing Notice where we may share this data.
Under the General Data Protection Regulation (GDPR) the lawful basis we rely on for processing this information are:
- Your consent; you are able to remove your consent at any time by contacting [email protected].
- We have a contractual obligation
- We have a legal obligation
- We have a vital interest
- We need it to perform a public task
- We have a legitimate interest
How we store your personal information
Your information is securely stored at Chequers Head Office, Rushlake Drive, Bolton BL1 3RL. Our Server which your data is stored on are based in the United Kingdom and are compliant with NHS Digital requirements and GDPR. Where we have paper records these are stored in secure locked cabinets.
We keep your personal information and data in line with the NHS Records Management Code of Practice which specifies the retention time periods. Further information regarding this can be found at: https://digital.nhs.uk/data-and-information/looking-after-information/data-security-and-information-governance/codes-of-practice-for-handling-information-in-health-and-care/records-management-code-of-practice-for-health-and-social-care-2016
Once the retention period has passed, we will delete your information from our servers and where we hold paper information this will be destroyed via an accredited secure shredding organisation or at Chequers Health Group Head Office.
Accuracy of personal data
Chequers Health Group will aim to ensure that the personal data we hold about you is accurate and kept up to date. If you believe that any information we are holding about you is inaccurate, out-of-date or incomplete, please notify us at [email protected] as soon as possible. We will correct or delete any information found to be incorrect without undue delay.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at [email protected] if you wish to make a request.
Photographs at events
When attending a Chequers Health Group event our official photographer may take an individual or group photograph of attendees during the course of an event. In the case of our awards events, photographs of winners and entrants will be taken. These may be posed or non-posed photographs and will not be used out of context for the specific event.
We will notify attendees the identity of the photographer and how photographs will be used and that attendees should make themselves known if they do not want to appear in any photographs.
Photographs from events will be made available via our website.
Contact us
If you have any queries about this notice or your data, or you wish to submit an access request or raise a complaint about the way your personal information has been handled, please do so in writing for the attention of our Data Protection Officer at Chequers Health Group Ltd, Chequers Health Centre, Rushlake Drive, B1 3RL, or by email to [email protected]
Should you be unhappy with our response or how we have used your data, you can raise a complaint to the ICO.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
