We may keep two categories of personal information about you.
Standard Personal Information
This is for example, information we use to contact or identify you.
Special Categories Information (for example, health information)
Standard personal information includes:
contact information, such as your name, username, address, email address and phone numbers;
the country you live in, your age, your date of birth;
details of any contact we have had with you, such as any complaints or incidents;
financial details – all credit/debit card information you share with us is stored in an online and highly secure system. Once stored we can only see the last 4 digits and expiry date of the card.
Special category information includes:
information about your mental or physical health, we get this information from any forms that you have completed and from reports about your health and any treatment or care you have received. It may also be recorded in details of contact we have had with you in regard to incidents or complaints.
What we use your personal information for
We process your personal information for the purposes set out in this privacy notice. We have also set out some legal reasons why we may process your personal information (these depend on what category of personal information we are processing). We normally process standard personal information if this is necessary to provide the services set out in a contract or it is required or allowed by any law that applies. Please see below for more information about this and the reasons why we may need to process special category information.
The law requires us to have a lawful reason for processing your personal information. We process your standard personal information:
Where it is necessary to provide the services we provide for you, required or allowed by law.
We process special category information about you because:
it is necessary for a purpose designed to protect the public against dishonesty, malpractice or other seriously improper behaviour (for example, investigations in response to a safeguarding concern, a member’s complaint or a regulator (such as the General Medical Council) telling us about an issue), as well as complying to the general data privacy regulation mandated by the Government;
As is best practice, we will only ask you for permission to process your personal information if there is no other legal reason to process it. If we need to ask for your permission, we will make it clear that this is what we are asking for and ask you to confirm your choice to give us that permission. If we cannot provide a product or service without your permission (for example, we can’t manage and run a health trust without health information), we will make this clear when we ask for your permission. If you later withdraw your permission, we will no longer be able to provide you with a product or service that relies on having your permission.
We process your personal information for a number of legitimate interests, including managing all aspects of our relationship with you,
Legitimate interest is one of the legal reasons why we may process your personal information. Considering your interests, rights and freedoms, legitimate interests which allow us to process your personal information include:
to exercise our rights, to defend ourselves from claims and to keep to laws and regulations that apply to us and the third parties we work with; and
Sharing your information
In accordance with GMC guidelines on patient safety, the ADHD Centre will endeavour to share relevant information with other healthcare professionals such as your GP.
Please confirm by selecting Yes or No if you agree/disagree with this policy (If you select No then we will not share your information) You will be given the option each time we contact you regarding any letter we prepare for you to change your consent.
However, please note that our clinicians are duty bound by their own governing registration bodies on patient confidentiality. According to these guidelines they may be required if certain risk issues arise concerning public safety, they may be obliged to disclose this information to other relevant authorities.
If we do share your information, we will make sure appropriate protection is in place to protect your personal information in line with data-protection laws.
How long we keep your personal information
We keep your personal information in line with set periods calculated using the following criteria.
How long you have been a client with us, the types of services you have with us.
How long it is reasonable to keep records to show we have met the obligations we have to you and by law.
Any periods for keeping information which are set by law or recommended by regulators, professional bodies or associations.
Any relevant proceedings that apply.
If you would like more information about how long we will keep your information for, please contact us at firstname.lastname@example.org