CHURCH HILL DENTAL PRACTICE PRIVACY POLICY



Who are we?


Church Hill Dental Practice is a general dental practice operating at 37-39 Morningside Road, Edinburgh, EH10 4DR.


What do we do?


We provide general dental services under contract with NHS Lothian.


What information do we collect about you?


We collect information about you when you engage us for dental services.
This information will relate firstly to your personal circumstances – name, address, date of birth, contact details including phone numbers and e-mail address.
Additionally, we will collect data relating to your dental treatment including clinical notes, pictures and radiographs.
Finally, we collect special categories of personal data if this is necessary for the provision of our services.
An example of this is when we need to record information about your health because it will impact upon your dental treatment.
For a guide to these special categories see the link below:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/special-category-data/


How the law protects you.


Data protection laws state that we are only able to process personal data if we have valid reasons to do so.
The basis for processing your personal data includes, but is not limited to: provision of dental services, to contact you regarding the provision of your dental treatment, to enable billing and remittance, and to maintain our legal requirements under healthcare and other legislation.


How do we secure the personal information we hold about you?


We follow strict security procedures in the storage and disclosure of information that you have given us to protect the personal information that we have under our control.
The security measures are designed to prevent unauthorised access, improper use and disclosure, unauthorised modification and unlawful destruction or accidental loss.
Please remember that no method of transmission over the internet, or method of electronic storage is completely secure and reliable.
Although we do our best to protect your personal information, we cannot guarantee its absolute security.


Where do we store your personal information?


All information you provide to us is stored on our premises on a secure server.
From time to time, your information may be transferred to and stored elsewhere (for example when supplied to a different healthcare provider, or to the NHS authorities) which may hold this information on servers either within the EEA or in a country outside the EEA.


Who might we share your information with?


In the course of providing dental services for you, it is likely to be necessary for us to share some of your personal information with third parties.
This would include NHS regulatory authorities (such as NHS Lothian, or Dental Practitioner Services), or other dental providers in the event of a referral being made (such as to Edinburgh Dental Institute, or to an orthodontic provider).
We will only ever share such information about you that is necessary to provide dental services, or to meet our statutory and regulatory obligations.
For the avoidance of doubt, we do not and never shall sell your personal data to third parties for marketing or advertising purposes.


Retention of your personal information


We retain your data only for as long as necessary in accordance with applicable laws.
This means that your data will be retained even if you register for dental treatment elsewhere.


How can you access the personal information we hold about you?


You have a right of subject access.
This means that you are entitled to request a copy of your personal data and we will grant you access or provide you with all personal data that we hold about you.
Also, you have a right of data portability.
Under this right you are entitled to request that your personal information is provided to you (or to another organisation) in a portable, machine readable, electronic format. This means that your data will be retained even if you register for dental treatment elsewhere.


How do you discuss or complain about our use of your personal data?


If you have any questions about our privacy policy or information we hold about you please contact us by email at: enquiries@churchhilldental.co.uk or by writing to: Iain Tunnah at Church Hill Dental Practice, 37-39 Morningside Road, Edinburgh, EH10 4DR.
You also have the right to make a complaint about how we process your personal data to the Information Commissioner:

https://ico.org.uk/concerns/

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Tel: 0303 123 1113