When you book an appointment, we collect personal information such as your name, phone number and email address so that we can identify you. We record your contact details so that we can respond to your enquiries, remind you about your appointments and provide you with information related to your appointment only.
We do not use any of your data for marketing purposes.
2.INFORMATION ABOUT YOUR HEALTH
All information related to your health is noted on either the DVLA medical form or equivalent medical form which you as the individual take away from the appointment with you. No copies are made or kept.
4. HOW WE STORE AND PROCESS YOUR DATA
Drivers and Medicals Ltd keeps your personal information safe and secure. We use Acuity Scheduling to store and process data related to your appointment booking. Acuity Scheduling are secure, GDPR compliant, web-based appointment management services. Your data is always held and accessed securely. We will not disclose your personal information without your explicit consent unless compelled to do so in order to meet legal obligations, regulations or valid governmental requests.
5. SHARING YOUR DATA WITH OTHERS
As part of our obligations as primary healthcare practitioners there may be circumstances where we need to share information with other healthcare practitioners or organisations involved in your care, such as the DVLA, GPs, consultants and surgeons. We will always consult you first, unless we are under a legal obligation to comply.
6. HOW LONG WE RETAIN YOUR DATA
We will retain your records about the date of your appointment, the location and time plus your name and other contact details indefinitely unless you ask us to delete them. We are required by law to retain your records for a minimum of eight years after you cease to be a patient.
7. YOUR RIGHTS
At any point whilst we are in possession of, or processing your personal data, you have the following rights:
Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.
Right of portability – you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing which we do not use.
Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.
8.EXERCISING YOUR RIGHTS
If you want to exercise any of these rights, please contact us using the specific email address for this purpose – firstname.lastname@example.org.
After the period during which we are legally required to retain your records has expired, you may ask us to delete your records. All personal data will be deleted, unless basic information, such as erasure details, needs to be retained by us to meet our future obligations to you or other legal or regulatory requirements.
In the event that we refuse a request under rights of access, we will provide you with a reason, which you have the right to legally challenge. At your request, we can confirm what information we hold about you and how it is processed.
In order to protect your privacy, we will need you to confirm your identity before we are able to release any of your personal information. We will accept the following forms of identification (ID): a copy of your driving licence, passport, birth certificate and a utility bill not older than three months. A minimum of one piece of photographic ID listed above and a supporting document is required. If we are not satisfied, further information may be sought before personal data can be released.
10.DATA PROCESSING COMPLAINTS
In the event that you wish to make a complaint about how your personal data is being processed by Drivers and Medicals Ltd you have the right to complain to us using the contact details above. If you do not get a response within 30 days, you can complain to the Information Commissioner’s Office:
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF Telephone +44 (0) 303 123 1113 or email: https://ico.org.uk/global/contact-us/email/