SHEILA ADAMS PHSH. ARH.
What personal information do I collect?
In order to treat you, I will ask you to provide certain information.
- Date of birth
- Home address
- Email address
- Telephone number
- Medical history
To this, over time, I will add details of the condition for which you have consulted me and the remedies and other therapies that I have prescribed or recommended.
How do I collect this personal information?
All the information collected is obtained directly from you. This is usually at the point of your initial consultation. The information is collected via a ‘Medical history form’ which I ask you to complete prior to or at the time of your initial consultation. At the point at which you provide your personal information, I will also request that you provide consent for me to store and use your data. Your consent is required in order to ensure my compliance with data protection legislation.
Subsequently, I will add to this initial information with details of the consultations you hold with me.
How do I use this personal information?
I use your personal information to analyse the conditions for which you have consulted me and to prescribe remedies and other therapies.
I will communicate with you by email, other digital methods, by telephone and post.
With whom do I share your personal information?
I do not share your personal information.
How long do I keep your personal information?
I need to keep your personal information for as long as you continue to consult me. Since patients often return for more consultations after a period of absence, I will keep your information for 7 years after you last consultation. At that point, your file will be securely destroyed and any digital information will be erased from my computer systems.
Accuracy of Data and keeping data up to date
Sheila Adams has the responsibility to ensure that patients information is kept up to date. Patients will be required to let Sheila Adams know if any of their personal data changes.
Accountability and governance
Sheila Adams is responsible for ensuring that her practice remains compliant with date protection requirements and can provide evidence that is has. For this purpose, those from who date is required will be asked to provide written consent. The evidence of this consent will then be securely held as evidence of compliance.
Sheila Adams has a responsibility to ensure that data is both securely held and processed. This includes:
- Using strong passwords for information held within computer systems.
- Restricting access to computer and paper based files.
- Using password protection on laptops and PCs that contain or access personal information.
- Using password protection or secure cloud systems.
- Providing adequate virus-protection and firewall software to secure computer-based systems.
Subject access request
Sheila Adams patients are entitled to request access to the information that is held by Sheila Adams. The request needs to be in the form of a written request to Sheila Adams.
On receipt of the request, the request will be formally acknowledged and delt with within 14 days unless there are exceptional circumstances as to why the request can not be granted. Sheila Adams will provide a written response detailing all information held on the member. A record will be kept of the date of the request and the date of the response.
Data Breach Notification
Were a data breach to occur, action shall be taken to minimise the harm. Sheila Adams will inform any patients where she believes their personal information has been compromised. Where necessary, the Information Commissioner’s Office would be notified.
If a patient contacts Sheila Adams to say that they feel that there has been a breach by Sheila Adams, she will ask the patient to provide an outline of their concerns. If the initial contact is by telephone, Sheila Adams will ask the patient to follow this up with an email or a letter detailing their concerns. The concern will then be investigated fully and a response made to the patient. Breach matter will be subject to a full investigation, records will be kept and all those involved will be notified of the outcome.
Policy review date: 30 September 2020.