At Chester Anaesthetics (CA), we are committed to protecting your personal information and confidentiality and we take all reasonable measures to ensure the confidentiality and security of personal data for which we are responsible, whether computerised or on paper.
Our policy complies with UK law accordingly implemented, including that required by the 2018 EU General Data Protection Regulation (GDPR).
This Privacy policy covers personal information we collect, hold and process from patients and no information is collected from our website chesteranaesthetics.com .
CA has nominated a Data Protection Officer (“DPO”) to ensure that we comply with data protection law. Our DPO has responsibility for data protection compliance. The CA practice manager is a “Data Controller” of the personal information you provide to us. Each Consultant Anaesthetist partner of CA is also individually regarded as a “Data Controller”, meaning that they must comply with the data protection legislation and relevant guidance when handling your personal information. You can expect our Data Controllers to handle your information in line with this privacy policy, which includes using your personal information as set out in more detail below.
If you would like further information about any of the matters contained within this Privacy Policy, or have any other concerns or questions about how we collect, store or process your personal information, please contact the DPO using the contact details below.
This privacy policy explains what personal data CA collects from you, through our interactions with you.
CA’s legal basis for processing your data
CA will obtain your consent as the legal basis for us to collect, hold and process your personal and/or sensitive information in order to allow us to fulfil or take steps to fulfil any contractual obligation we have with you. In addition to this, CA can lawfully process special category data such as your health records, provided by you, in order to provide you with the appropriate healthcare.
Information we collect about you
As a patient of CA, we will hold some information relating to your medical treatment, which is known as a special category of personal data under the law, meaning that it must be handled even more sensitively than other categories. The personal information we hold about you includes the following;
- Name
- Address
- Date of birth
- Next of Kin if under 16 years
- Medical Insurance Company
- Policy number and name of policy holder
- Pre-authorisation number
- Description of the operation performed
- CCSD procedure code(s) for the operation(s) performed
- Name of the surgeon and anaesthetist operating
- Communications sent to from/to you or from/to other doctors relating to your anaesthetic care
- Invoices issued by us to insurance companies, to you or to other healthcare providers.
We do not collect debit/debit card details currently. We do not hold GP records, anaesthetic records or operation notes, although we may forward these to your insurance company when requested by them to do so, after obtaining your authorization.
If you choose to withhold any personal information requested by us, it may not be possible for us to process your insurance claim on your behalf, or to provide you with anaesthetic services.
Website usage information is collected using cookies.
How we use information about you
We collect information about you in order to process your claim with your medical insurance company, or to claim anaesthetic fees paid by you to the hospital, or to invoice you for anaesthetic fees, or to liase with other healthcare providers about your healthcare needs.
CA needs to hold and process the personal and health information you have provided us in order to collect anaesthetic fees due and to optimize your current and future care with us.
Information collected from you is stored on secured paper records and in a specialist database where it is held and processed electronically on secure servers, which are subject to the appropriate technical security measures mandated by the EU General Data Protection Regulations. CA makes every effort to prevent unauthorized access to and use of your information. In doing so, CA complies with the EU GDPR 2018 data protection law, the UK Data Protection Act 2018 and all applicable medical confidentiality guidelines issued by professional bodies, including the General Medical Council.
Who we may share your information with and why
CA may need to share your information with other medical professionals, healthcare providers and/or medical insurance companies in order to deliver services you have requested. We do not share your information with any other third parties.
Your rights as a data subject
You have the right to request a copy of the information that we hold about you. You have the right for your details to be forgotten (right to erasure). If you would like a copy, amend or erase some or all of your personal information, please email us, write to us or call us and you be directed to the appropriate responsible person.
CA medical records
CA does not hold any medical records, but will collect and forward these on the request of medical insurance companies or other health care providers, after obtaining your authorisation.
Data retention periods
In accordance with the Records Management Code of Practice for Health and Social Care 2016, CA has implemented the following retention period;
- Type of Record: Customer Record
- Retention Period: 15 Years
- Notes: Basic information as detailed above
Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on our website. This privacy policy was last updated on 24 May 2018.
How to contact us
Please contact us if you have any questions about our privacy policy or information we hold about you:
- By email to chester.anaes@btinternet.com
- Or write to us at: Chester Anaesthetics, The Grosvenor Nuffield Hospital, Wrexham Rd, Chester CH4 7QP
- Or phone us on: 01244 336178 / 07785 612578