How your information is used and stored
This notice explains how your information may be held and used by us.We understand that we have a responsibility to protect and respect your privacy and look after your personal data. This Privacy Notice explains what personal data we collect, how we use your personal data, the reasons we may need to disclose your personal data to others and how we store your personal data securely.
1. About the practice
Fair Oak Dental Practice is a fully private dental practice owned by Dr. Sanjay Davda and Dr. Latha Davda, receiving no funding from the NHS. It provides general dental care to children and adults on fee per item basis. The care provided is based on national guidelines published by NICE, DBOH, Resus Council, Royal Colleges and abides by the regulating bodies which consists of General Dental Council and Care Quality Commission. The practice was inspected by the CQC in 2012 and in 2016.
2. What information we hold about you
By “information” we mean all of the personal and financial information about you that we collect, use, share and store. We can only keep and use information for specific reasons as set out in law. This can include but is not limited to:
3. Collection of information
We collect personal information directly from you. This will be from phone calls, emails, letters, and any forms we ask you to fill in. Your payment details are collected through an external company World Pay, which processes the credit card transactions. The data security process is assessed each year and a PCI DSS certificate is issued. We do not collect any information through our website. We may receive information about you, from other secondary or primary care providers, dental laboratories with your consent, to provide appropriate care.
4. Why we need the information
The General Data Protection Regulation (2018) requires us to have one or more of five reasons for using your information. Our reasons are:
5. How we use your information
These are the main ways we will use your personal information
You have a legal right to tell us at any time that you do not want us to use the information we hold in this way or to withdraw any consent that you have given to us.
We will only contact you in ways that are acceptable to you.
We will endeavour to ensure that the information we have about you is accurate and up to date;
7. With whom we may share information
When using the personal information we hold we may share it with other people or organisations that are associated with us, to assist us in delivering our service accurately. We will treat the personal information we hold as confidential, but may share the information with your consent with the dental laboratories and secondary or primary health care providers who have a legitimate interest in receiving this information. We may share the information with your personal insurance companies with your consent. We hold your clinical data on a patient management system, supported by a third party bound by GDPR regulations. We may share the information with our indemnity providers, should a claim be raised.
For the avoidance of doubt, we do not and never will sell your personal information to third parties for marketing or advertising purposes.
8. Using information outside the European Economic Area (EEA)
We will not normally need to share or otherwise use your information outside the United Kingdom. Although unlikely, if there is an overwhelming reason to share or use your information outside the UK, in these cases we will take all reasonable steps necessary to make sure we obtain your prior permission and that your information is protected to UK standards. This may only arise, if you needed or wished to seek dental care when abroad.
9. Security of information
The practice protects personal information against unlawful or unauthorised processing and accidental disclosure. IT security will follow the Government’s National Cyber Security Centre’s guidance for small businesses. Your paper clinical records are kept securely in locked unmovable cabinets and the electronic record can only be accessed by authorised personnel through password protected terminals.
10. How long we hold information
We donot keep your information for longer than we need to, which is usually up to twelve years after your relationship with the us ends, unless we are required to keep it longer - for example, due to a court order or investigation by the tax authorities,(see point 14.1 below).
11. Your legal rights in relation to your information
The law guarantees you rights in relation to your personal information. We have set out details of your rights below under individual headings.
12. Access to information
You always have the right to ask whether or not we hold information about you. And if we do, what the information is, why we are holding it and the ways it is being used. You are also entitled to a copy of the information. In case of children, only the parent/s who have parental responsibility can have access to the information.
13. Rectification of information
We always want the information we hold to be up to date and accurate. If any of the information we hold is either incorrect or out of date, then please inform us and we will fix it.
14. Erasure of information
15. Portability of information
You have the right to receivefrom us some of the information that you provided in a machine-readable format.
16. Objecting to our use of your information
We have notedabove the ways in which we use the information we hold. Where we have told you that any use of information is based on ‘legitimate interest’, you can raise an objection to that use. When you make an objection we will respond to you within one calendar month. We will stop using the information in this way unless we disagree that we should because of a compelling legal justification for continuing to use it. We will always advise you about this justification.
You can always simply opt out of receiving marketing communications from us at any time. You can do this by contacting us in the usual way.
17. Restricting some uses of information
In certain circumstances you have a right to block or limit the use of information by us. This may arise where:
18. Contacting us for further Information about your rights
You should contact us in the normal way to discuss how we hold and use your information, and your rights.
Your first contact should be to our Data Controller, Mr. Sanjay Davda.
19. Who can I complain to?
If, for whatever reason, you are unhappy with how we are using your personal information you should contact the practice manager Tina Nutley or Latha Davda in the first instance, so that we can understand your issue and try to resolve it. If we cannot resolve the issue, you have the right to complain to the Information Commissioner’s Office (ICO). For further information visit: ico.org.uk