Introduction
At Obsgyn London, we take the protection of your personal data seriously[cite: 3]. We comply with the UK Data Protection Act 2018, the UK General Data Protection Regulation (GDPR), and all applicable data protection and confidentiality laws[cite: 4, 8]. This policy explains how we collect, use, store, and protect your information[cite: 5, 6].
Information We May Collect
We keep records about your treatment and care in electronic and paper formats[cite: 10, 11]. Information may include:
- Personal details such as name, address, DOB, and contact details[cite: 13].
- Emergency contact or next of kin details[cite: 14].
- GP details and referral information[cite: 15].
- Clinical notes, medical reports, and test results (scans, blood tests, etc.)[cite: 17, 18].
- Appointment records, prescriptions, and correspondence[cite: 16, 19, 21].
- Website form data and telephone call recordings for quality purposes[cite: 20, 22].
How We Use Your Personal Data
We only use your data for lawful purposes and where there is a clear legal basis[cite: 36]. Purposes include:
- Providing safe and effective medical care and follow-up[cite: 27, 28].
- Communicating with other healthcare professionals involved in your care[cite: 29].
- Managing appointments, billing, and administrative processes[cite: 30, 31].
- Meeting legal/regulatory obligations and preventing fraud[cite: 33, 34].
Data Security & Storage
Information submitted through our website is encrypted using Secure Socket Layer (SSL) technology[cite: 50]. Data is stored on secure servers accessed only by authorised personnel[cite: 51]. We follow strict confidentiality policies and provide staff training on data protection[cite: 54, 55].
Your Rights
Under data protection law, you have the right to[cite: 75]:
- Access your personal data or request corrections[cite: 76, 77].
- Request restriction of processing or object to certain uses[cite: 78, 79].
- Request deletion of data where legally permitted[cite: 80].
To request access, please write to our Practice Manager with your full name, address, DOB, and details of the information requested[cite: 81].