Privacy Policy
Hampton Court Practice is a private medical practice dealing with Clients who may have a range of mental health issues. We deal with adult and adolescent ADHD, ADD, Gender dysmorphia, military PTSD, depression and mood disorders and Occupational Psychiatry.
At Hampton Court Practice we are committed to protecting your privacy. Under the data protection law (UK General Data Protection Regulation & Data Protection Act 2018) you have control of your data. This is our Privacy Statement which will tell you how we deal with your information and how you can control what we do with it. In this statement we refer to both information and data in the same context.
Should you have any questions about this statement or wish to make a complaint regarding your data please contact:
Practice Manager/DPO
Hampton Court Practice
Tel: 07927 531 534
If you have already made a complaint to us about how we treat your data, but you still have not had a resolution and you want to take your complaint further, you should contact the Information Commissioner’s Office.
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Tel: 0303 123 1113, ICO Website
What information we collect
We collect personal information that may include date of birth, email address, postal address, telephone number and bank details.
We collect sensitive personal information such as information about your health if this is required for the purpose you have contacted Hampton Court Practice.
We also collect personal information using Cookies when you use our website. which pages users visit most often as well as non-specific geographical information. Wherever possible we use aggregated or anonymous information which does not identify individual visitors to our websites.
Why we collect information
We collect information to deal with you as a stakeholder, an employee, or if you are one of the clients we help. We only ask for the information we need at appropriate times we need it.
Who collects the information
Our Clinical services team: through information collected to provide medical care services and treatment.
Our Practice Management Team: through the contract you sign with us if you are an employee or contractor.
Credit/debit card details may be collected by the partner organisations we work with, for example ‘Sum up’, with regard to service fees. Please visit their websites to see their privacy policies.
How we collect information
We collect information about you when you:
use our website
contact us about our services
work for us, are a trainee with us or
use our clinical services
We will inform you if we use your information in any other way than the original reasons we collected it.
Who we share information with
We only share information that is required when:
you are in treatment, when it becomes our duty of care to share the information to benefit you.
we are legally required to do so, e.g. by a law enforcement agency, legitimately exercising a power, or if compelled by an order of the Court.
we are working with carefully selected partners that are carrying out work on our behalf.
we work with trusted clinical partners outside the EU. In this instance we will only transfer to organisations who comply with EU data protection regulations and participate in a relevant Privacy Shield Framework for that country.
We will never sell your information to anyone.
How we use information
What we collect and why we use it
Legal basis for processing
Sensitive medical information for treatment of our clients
We will ask for consent for treatment and handle the information respectfully and safely, according to the Caldicott Principles
Personal information for teaching purposes
We will ask for consent
Website usage information (cookies) to understand how our site is used and improvement we can make
We will use legitimate interest, via cookies and other technologies
Personal and Sensitive information to carry out the duties of an employer for both HR and Finance
We will use contractual processing and legitimate interest
Personal and Sensitive information to carry out work with us if you are a contractor to track our contract obligations
We will use contractual processing
Right to access
You have the right to ask for all or part of the information we keep about you.
We will ensure that it is given to you within 30 days.
If we hold a lot of your information this may take some time to copy and send out to you, if this is the case we will contact you to inform you of an extension.
We will ask your permission if another person or organisation asks for your information.
We will make sure that your information is secure when it is sent out to you, in a form that you request.
You can exercise this right by contacting us on the details above either verbally or in writing.
Right to restrict or object to how your information is used
You have the right to object to any information that you feel is incorrect or that we should not retain.
You have the right to request the restriction or suppression of any personal information we hold on you. In our clinical setting your view on restrictions on your data will be assessed consistently.
You can exercise this right by contacting us on the details above either verbally or in writing.
Right to change your information if it is incorrect
You have the right to change the information we hold on you if you feel that it is incorrect. We will make sure that your information is as accurate as possible.
Within medical records however this Right is subject to discussion with the relevant clinical professional as it may be their clinical opinion rather than classifying it as personal information.
You can exercise this right by contacting us on the details above either verbally or in writing.
Withdrawing consent
If your consent was asked for you can, at any time, withdraw your that consent for us to further process your data.
You can do this by contacting us via email, telephone, post or if you meet with us face to face. We will confirm in writing any request for withdrawal of consent.
Special Category Data (information within heath records)
Special Category data at Hampton Court Practice relates to information on medical diagnosis, provision of health care and the management of your healthcare services.
If you receive treatment from us the Special Category data we collect is then governed by the consent under Human Rights Act 1998 and the Caldicott Principles, this means we have a duty to share your information with other agencies or medical professionals who are involved in your care.
Right to erasure or ‘be forgotten’
Hampton Court Practice will adhere to this right which allows you to request deletion or removal of your Personal information where it is no longer necessary for the purpose which it was originally collected. However:
As our Special Category data is being processed by, or under the responsibility of, a clinical professional who is subject to a legal obligation of professional confidentiality (e.g. a health professional) and the with need to retain your records for a set amount of time, the right to erasure will not apply to this data.
How we dispose of personal and sensitive information
We abide by the Records Management Code of Practice for Health and Social Care put in place in 2016.
We will ensure that medical information is kept up to date and disposed of under governmental guidelines.
We will manage retention of all data against national retention guidelines.
All our confidential information is disposed of securely.
How we secure data
We will make every effort to ensure your data is seen only by those who need it are those who see it.
We will also make every effort to ensure our systems are secure enough to keep your information safe and secure.
We are registered with the Information Commissions Office and abide by their code of conduct in dealing with your information.
We will ensure that our practices have data protection at their core and we will make sure we practice ‘privacy by design’, making sure any risks to the security of your data are addressed in all our practices.
How we are accountable for the data we keep
We will ensure that the Practice and all its staff:
Adhere to our policies, relevant codes of conduct and certification schemes
Demonstrate compliance to the regulatory bodies of Care Quality Commission; Information Commissions Office; and National Data Guardians.
Children’s data
Hampton Court Practice defines a child as a person under the age of 18 years. Information on this age group will be kept with the permission of their parent or legal guardian.