We are committed to safeguarding the privacy of our website visitors; this policy sets out how we will treat your personal information.
1. What information do we collect?
We may collect, store and use the following kinds of personal data:
(a) information about your visits to and use of this website;
(b) information about any transactions carried out between you and us on or in relation to this website, including information relating to any purchases you make of our goods or services;
(c) information that you provide to us for the purpose of registering with us and/or subscribing to our website services and/or email notifications.
2. Information about website visits
We may collect information about your computer and your visits to this website such as your IP address, geographical location, browser type, referral source, length of visit and number of page views. We may use this information in the administration of this website, to improve the website's usability, and for marketing purposes.
A cookie is a text file sent by a web server to a web browser, and stored by the browser. The text file is then sent back to the server each time the browser requests a page from the server. This enables the web server to identify and track the web browser. We may send a cookie which may be stored on your browser on your computer's hard drive. We may use the information we obtain from the cookie in the administration of this website, to improve the website's usability and for marketing purposes. We may also use that information to recognise your computer when you visit our website, and to personalise our website for you. Most browsers allow you to refuse to accept cookies. (For example, in Internet Explorer you can refuse all cookies by clicking "Tools", "Internet Options", "Privacy", and selecting "Block all cookies" using the sliding selector.) This will, however, have a negative impact upon the usability of many websites.
3. Using your personal data
(a) improve your browsing experience by personalising the website;
(b) send information (other than marketing communications) to you which we think may be of interest to you by post or by email or similar technology;
(c) send to you marketing communications relating to our business which we think may be of interest to you by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications to be sent by emailing us);
(d) provide other companies with statistical information about our users - but this information will not be used to identify any individual user.
4. Other disclosures
(a) to the extent that we are required to do so by law;
(b) in connection with any legal proceedings or prospective legal proceedings;
(c) in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk); and
(d) to the purchaser or seller (or prospective purchaser or seller) of any business or asset which we are (or are contemplating) selling or purchasing.
5. Policy amendments
6. Your rights
You may instruct us to provide you with any personal information we hold about you. Provision of such information may be subject to the payment of a fee. You may instruct us not to process your personal data for marketing purposes. In practice, you will usually either expressly agree in advance to our use of your personal data for marketing purposes, or we will provide you with an opportunity to opt-out of the use of your personal data for marketing purposes. You can also instruct us not to use your personal data for marketing purposes by email at any time.
7. Third party websites
The website contains links to other websites. We are not responsible for the privacy policies of third-party websites.
The practice aims to meet the requirements of the Data Protection Act 2018, the General Data Protection Regulation (GDPR], the guidelines on the Information Commissioner’s website as well as our professional guidelines and requirements.
The data controller is Anju Prashar, who is also the information Governance Lead and NHS practice the Data Protection Officer.
This Privacy Notice is available on the practice website at www.dentalsuitehounslow.co.uk/ at reception/ by email if you contact email@example.com/ by calling 0208 577 3038.
You will be asked to provide personal information when joining the practice. The purpose of us processing this data is to provide optimum health care to you.
The categories of data we process are:
- Personal data for the purposes of staff and self-employed team member management
- Personal data for the purposes of direct mail/email/text/other marketing
- Special category data including health records for the purposes of the delivery of healthcare
- Special category data including health records and details of criminal record checks for managing employees and contracted team members
We never pass your personal details to a third party unless we have a contract for them to process data on our behalf and will otherwise keep it confidential. If we intend to refer a patient to another practitioner or to secondary care such as a hospital we will gain the individual’s permission beforethe referral is made and the personal data is shared.
- Personal data is stored in the EU whether in digital or hard copy format
- Personal data is obtained when a patient joins the practice when a patient is referred to the practice and when a patient subscribes to an email list
The lawful basis for processing special category data such as patients’ and employees’ health data is:
- Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systems and services on the basis of Union or Member State law or a contract with a health professional
The lawful basis of processing personal data such as name, address, email or phone number is:
- Consent of the data subject
- Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract
The retention period for special data in patient records is indefinitely in order to meet our legal requirements.
You have the following personal data rights:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure (clinical records must be retained for a certain time period)
- The right to restrict processing
- The right to data portability
- The right to object
Here are some practical examples of your rights:
- If you area patient of the practice you have the right to withdraw consent for important notifications, newsletters, surveys or marketing. You can inform us to correct errors in your personal details or withdraw consent from communication methods such as telephone, email or text. You have the right to obtain a free copy of your patient records within one month.
- If you are nota patient of the practice you have the right to withdraw consent for processing personal data, to have a free copy of it within one month, to correct errors in it or to ask us to delete it. You can also withdraw consent from communication methods such as telephone, email or text.
Comments, suggestions and complaints
Please contact the practice for a comment, suggestion or a complaint about your data processing at firstname.lastname@example.org, or 0208 577 3038 or by writing to or visiting the practice at 14 Kingsley Road, Hounslow, Middlesex TW3 1NP. We take complaints very seriously.
If you are unhappy with our response or if you need any advice you should contact the Information Commissioner’s Office (ICO). Their telephone number is 0303 123 1113, you can also chat online with an advisor. The ICO can investigate your claim and take action against anyone who’s misused personal data. You can also visit their website for information on how to make a data protection complaint.