The Well - One Clinic

An independent social enterprise clinic.

Well – One Clinic Privacy Notice

This privacy notice sets out how the Well – One Clinic collects, uses and protects any information held about you. We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified you can be assured that it will only be used in accordance with this privacy statement. The Well – One Clinic may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

What we collect

We may collect the following information:

  • Details about you, such as address and next of kin
  • Any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments, etc.
  • Notes and reports about your health
  • Details about your treatment and care
  • Results of investigations, such as laboratory tests, x-rays, etc.
  • Relevant information from other health professionals, relatives or those who care for you
  • What we do with the information we gather

    We collect and hold this data for the sole purpose of providing healthcare services including contacting your GP when requested. We will ensure the information is kept confidential. We can disclose personal information if;
  • It is required by law
  • You consent – either implicitly for your own care, or explicitly for other purposes
  • It is justified in the public interest
  • If we use your information for statistical or research purposes it will be anonymised. For clinical and non clinical audits this will be done in an anonymized format where possible. You may opt out of your records being used for audit purposes at any time.

    Change of details

    It is important that you tell the person treating you if any of your details such as your name or address have changed or if any of your details such as date of birth is incorrect in order for this to be amended. You have a responsibility to inform us of any changes so our records are accurate and up to date for you.

    Where we store your personal data

    The data that we collect is stored at the Well – One Clinic location in Beverley, with an encrypted backup being kept offsite, but still inside the European Economic Area (“EEA”). It may also be processed by staff at the Clinic who may be engaged in, among other things, replying to or fulfilling any of your requests or sending invoices. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice.

    All of our staff, volunteers and contractors receive appropriate and on-going training to ensure they are aware of their personal responsibilities and have contractual obligations to uphold confidentiality, enforceable through disciplinary procedures. Only a limited number of authorised staff have access to personal information where it is appropriate to their role and is strictly on a need-to-know basis.

    We maintain our duty of confidentiality to you at all times. We will only ever use or pass on information about you if others involved in your treatment have a genuine need for it. We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations), or where the law requires information to be passed on.

    Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site via the internet; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

    Security

    We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

    Links to other websites and your rights

    Our website may contain links to other websites of interest. However, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

    Controlling your personal information

    We will not sell, distribute or lease your personal information to third parties. If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible. We will promptly correct any information found to be incorrect.

    Access to information

    You have a right under the Data Protection Act 1998 to access/view information the clinic holds about you, and to have it amended or removed should it be inaccurate. This is known as ‘the right of subject access’. If we do hold information about you, we will:

  • give you a description of it
  • tell you why we are holding it
  • tell you who it could be disclosed to
  • and
  • let you have a copy of the information in an intelligible form.
  • If you would like to make a ‘subject access request’. please contact the Practice Manager in writing. There may be a charge for this service. Dr Beryl Beynon, Well-One Clinic, Jacob’s Well Yard, Swinemoor Lane, Beverley, HU17 0JX, UK is registered as a data controller under the Data Protection Act 1998. The registration number is Z1487345 and can be viewed online in the public register at. http://ico.org.uk/what_we_cover/register_of_data_controllers

    Contact us

    Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to us by email or by writing to us. http://ico.org.uk/what_we_cover/register_of_data_controllers