Hallcraig Dental Care Airdrie Scotland
Privacy Notice
At Hallcraig Dental Care ("we/us"), we respect the privacy of all patients' personal data. Hallcraig Dental Care is a "data controller". This means that we are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this privacy notice which will detail your rights and our obligations under Data Protection legislation.
Why we collect your data
We will collect information that is necessary to deliver your dental and health care and we only share your data where necessary with 3rd parties when we have sufficient safeguards to protect your data.
From time to time, we would like to keep you up to date with our services and products. We will always ask for your consent to contact you and you will be able to withdraw your consent at any time. Please contact us for more information.
We also use cookies to enhance your experience, further information can be obtained by following the link on our website. http://www.hallcraigdentalcare.co.uk/
How we collect your information
We only collect your information directly from you, or if you are making an appointment on behalf of someone else, including children. We may also receive personal data from the NHS or other third parties that relates directly to your dental health and medical history when required for clinical purposes.
The kind of information we hold about you
We will collect, store, and use the following categories of personal information about you which can be used to identify an individual:
- Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses.
- Sensitive personal data (also called Special Categories of personal data) is information as to your physical or mental health as well as other personal data.
Sharing your information
We will only use your data as the law allows and we will not transfer any of your personal information outside of the EEA.
We may share your data with third party service providers that are necessary for us to deliver our services to you. All third-party service providers are required to confirm that they have the appropriate security measures in place to comply with the GDPR and only process your personal information in accordance with our instructions.
Retention period
Under GDC (General Dental Council - the regulatory body which governs dentists) guidelines we are required to retain all information on your health record for 12 years or if the patient is a child at the time of treatment until they reach their 25thBirthday whichever one is first. After this your file will be made inactive or deleted on our computer software system or paper records will be shredded and disposed of appropriately.
Any details that we may hold for you that are not directly related to your health record will be deleted in accordance with out retention policy.
Rights of access, rectification, erasure, and restriction
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a "subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request rectification of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing.
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. Also your Rights related to automated decision making including profiling
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Request the transfer of your personal information to another party.
- Be informed how your data is being processed, via this privacy notice.
Complaints or Queries
We oversee compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal information, please contact us by filling out our online form or calling us on 01236 749756. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. You can find details for the ICO on their website, www.ico.org.uk.
