Privacy Notice

1. About this notice

This privacy notice explains how Haven Medical collects, uses, stores and protects personal information. It applies to all patients receiving care from Haven Medical, including both NHS-funded and private patients.

We are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable legislation.

2. What information we collect

We may collect personal details, contact information, NHS numbers, medical histories, referral information, clinical assessments, treatment records and relevant correspondence. We may receive this information directly from you, your GP, NHS organisations or other healthcare professionals involved in your care.

3. How we use your information

We use your information to provide and coordinate healthcare, manage referrals and appointments, maintain accurate medical records, communicate with you and other healthcare professionals, and meet our legal and regulatory obligations.

For NHS patients, information may also be used for appropriate service reporting and commissioning purposes.

4. Our lawful basis for processing

We process personal information under the lawful bases applicable to the purpose, which may include providing healthcare, complying with legal obligations and carrying out tasks in the public interest where applicable. Health information receives additional protection under data protection law, and we rely on an appropriate additional legal condition when processing it.

5. Sharing and protecting your information

Your information may be shared securely with relevant healthcare professionals, your GP, NHS organisations, commissioners and authorised service providers where necessary for your care or other lawful purposes. We do not sell your personal information.

We use appropriate technical and organisational measures to protect information against loss, misuse, unauthorised access or disclosure. Access is restricted to authorised personnel who need the information for their role.

6. How long we keep your information

We retain personal information only for as long as necessary, in accordance with applicable legal requirements and our records retention policies.

7. Your rights

Depending on the circumstances, you have rights to access your information, request corrections, seek restriction of processing, object to certain uses and exercise other rights available under data protection law. Some rights are subject to legal exemptions.

8. Contact us

For questions about this notice, to request access to your information or to exercise your data protection rights, please contact:

Email: [email protected]

You also have the right to raise a concern with the Information Commissioner’s Office (ICO) at www.ico.org.uk.