This privacy notice sets out how Autograph Dental uses and protects any information that you give when joining the practice.
The practice is committed to complying with the General Data Protection Regulation (GDPR), the Data Protection Act 2018, GDC, NHS and other standards.
The person responsible for Data Protection is Sian Hulyer.
WHAT TYPE OF INFORMATION DO WE HOLD?
- Personal details such as your address, date of birth, phone number and email address
- This is for the provision of dental health care, providing treatment plans, estimates and recalls
- Details of your NHS number and entitlement to healthcare treatment and exemption status if applicable
- Personal details such as details of family members for the provision of healthcare to children or for emergency contact details
- Medical history including your GP’s name and address
- Past and present dental history including x-rays and photographs
- Information about the treatment we have proposed and provided along with its price.
- Notes of conversations or incidents that might occur for which a record needs to be kept
- Records of permission or consent for treatment.
- Correspondence to other healthcare professions such as referrals
- Financial information relating to your treatment
- Details of any complaints made
- Legitimate interest - Processing is necessary for the performance of our care for patients and for defence of legal claims
- Special category data - data relating to your health care records is classed as special category data.
- Our legal basis for processing this is that it falls under Health and Social Care (Article 9 UK GDPR (h)).
- The General Dental Council
- The CQC
- Dental payment plans or insurers
- NHS Bodies if NHS dental care and treatment is provided
- Align Technology
- Dental Monitoring
- We are required to retain your dental records, X-rays and study models while you are a patient of this practice and aer you cease to be a patient for a minimum of 15 years (in England) or until the age of 25 (whichever is longer).
- There are several other documents that we may collect that have a variety of retention dates, for example the NHS PR form – used to declare payment exemptions – which needs to be kept for 2 years minimum. We have a retention schedule listing all documents and the timeframes for disposal. Retention periods may be changed from me to me based on business or legal and regulatory requirements
WHY DO WE NEED TO KEEP THIS INFORMAON?
We need to keep records of personal informaon regarding our paents in order to provide safe and appropriate dental care and treatment. It is also used to maintain accurate treatment records.
OUR LEGAL BASIS FOR PROCESSING DATA IS:
WHAT DO WE DO WITH YOUR INFORMAON?
We will only share your information if it is done securely and it is necessary for us to do so.
Your personal informaon may be securely shared with other healthcare professionals who need to be involved in your care (for example if we refer you to a specialist, need laboratory work undertaken or need to consult with your doctor)
We may also share your personal informaon securely to third pares where we are required by law or regulaon to do so. This may include:
HOW DO WE STORE YOUR INFORMAON?
Your Informaon is stored securely in the cloud, at the pracce in paper form on protected computer systems. Computer informaon is backed up regularly and may be securely stored away from our premises.
YOUR RIGHTS UNDER GDPR
You have a right to access the information that we hold about you and to receive a copy. You can make a request by contacting your practice or by e-mailingConcerns
You have a right to correct any information that you believe is inaccurate or incomplete. Please contact your pracce to request a change in information.
You have a right to request that we delete your personal information, although you should be aware that, for legal reasons, we may be unable to erase certain information (for example, information about your dental treatment). Please contact your practice to make this request.
You have a right to data portability; this could include supplying your information to another dentist. Please contact your practice to make this request.
If you have any concerns about how we use your information and you do not feel able to discuss it with your dentist or anyone at the practice, you can contact our Data Protection Officer via email at firstname.lastname@example.org. You can also seek advice from The Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or start a live chat or call helpline on 0303 123 1113.