Dr NY Clinic is committed to protecting your personal information and handling it lawfully, fairly and transparently. We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and relevant healthcare guidance including the Records Management Code of Practice for Health and Social Care.
For the purpose of data protection law, Dr NY Clinic is the Data Controller. For any data protection queries, please contact us using the details published on our website.
We may collect personal information when you:
This may include your name, address, email address, telephone number and relevant information about your enquiry.
Where you become a patient of the clinic, we will also collect and maintain clinical information necessary to provide safe and appropriate healthcare. This may include medical history, consultation notes, treatment records, correspondence and relevant health information.
We may also collect limited technical information automatically when you use our website, such as IP address, browser type and website usage data. This helps us maintain security and improve our services.
We use your personal data to:
We do not sell personal information.
Under UK GDPR we must identify a lawful basis for processing personal data.
General personal data is processed under one or more of the following lawful bases:
Where we process health or medical information, this is classed as special category data under UK GDPR. Such data is processed in accordance with Article 9(2)(h), which permits processing necessary for the provision of health care and medical treatment.
Patient confidentiality is fundamental to our service. Personal information is only shared where necessary for the provision of care, administration of services, or where required by law.
Information may be shared with:
We implement appropriate technical and organisational safeguards to protect your data. While we take all reasonable steps to secure online communications, transmission via the internet cannot be guaranteed to be completely secure.
Personal data is retained only for as long as necessary in line with legal, clinical and regulatory requirements.
Healthcare records are retained in accordance with the Records Management Code of Practice for Health and Social Care and other applicable professional guidance.
Under UK data protection law, you have the right to:
You also have the right to raise concerns with the Information Commissioner’s Office (ICO):
www.ico.org.uk
Our website uses cookies to support functionality and improve user experience. Further details are available in our Cookie Policy.
If you have any queries regarding this Privacy Notice, please contact us at info@drnyaesthetics.com.
This notice is reviewed periodically to ensure compliance with current data protection law and regulatory guidance.
