This Privacy Notice is intended to explain to the clients and external agencies how our Clinic collects, uses, stores and protects their personal information.
Harrogate Pain Clinic, which is part of Resilence Health Group Ltd, is a Data Controller who is responsible for the protection of all personal information.
We collect and process personal information in order to provide our services. Personal information is data or information about a living person that could be used to identify that person. This is information such as a person’s name, address, email, telephone number, date of birth, gender, finance details such as bank card details, family contact information, GP details and details regarding other external agencies involved in the support of a person.
On occasions we may also collect data or information that is called ‘Special Category Data’. Special category data is information of a sensitive nature or which has a particularly high risk of being used to negatively target or discriminate against clients. The special category data we collect is information that relates to a person’s health (physical or mental health past, current or future). In addition, during therapy or assessment a person’s data concerning their sex life or sexual orientation, racial or ethnic origin, political opinion or religious or philosophical beliefs may be disclosed. This is also classed as special category data.
We are committed to protecting a person’s confidentiality and processing data with integrity and within the law. To assist us in fulfilling our responsibilities we ask that all clients report immediately any changes to their personal information to ensure correspondence from us reaches them correctly.
➔ Contractual necessity
Where a client or their legal representative has signed a contract and we therefore needs to fulfil a promise of services outlined in the contract.
➔ Legal obligation
Where we are subject to legal obligations, for example processing finance data.
➔ Vital interests
Where we must process personal data in order to protect the vital interests of the client or another living person. For example, to save a person’s life.
➔ Public interests
To enable us to process personal data that is in the public interest, for example safeguarding disclosures.
➔ Legitimate interests
Where processing personal data is necessary to pursue a legitimate interest of the Data Controller. In these circumstances the rights and freedoms of the person must be considered and decisions as to why consent was not sought recorded. This is usually used in marketing processes.
➔ Consent has been provided
We will always inform the person what data is required, why and their rights with regards to the personal data we process on their behalf. This privacy notice contains all of the details required to enable a data subject to make an informed decision and understand their rights. We have a Consent and Mental Capacity Policy which staff members use to ensure consent from clients is obtained legally based on their age (children and adults), and that their capacity or competence is assessed and where needed their legal representative has full involvement.
We seek verbal or written consent to gather personal information when a referral is initially received but the privacy notice shall be sent immediately to the person explaining fully the process and their rights. The person has the right to withdraw their consent at any time. Where we decide that personal information will be used for a different reason than initially explained, we will seek fresh consent from the person.
We reserve the right to process personal information without the consent of a person if it is a member of the team’s belief it is required to safeguard the person or others from abuse.
Under data protection law, we must ensure that the people (data subjects) whose data they process have their rights explained and upheld. Data Subjects have the right to:
Right of Access: The right to request a copy of the personal information we hold about you.
Right to Rectification: The right to ask us to change or rectify any personal information held about you that you think is inaccurate.
Right to Erasure: The right to ask us to delete/ erase your personal information in certain circumstances.
Right to Restriction of Processing: The right to ask for restriction of processing in certain circumstances.
Right to Object to Data Processing: The right to object to the processing of personal data in certain circumstances.
Right to Data Portability: The right to ask that we transfer personal information to another organisation, or to the data subject in certain circumstances.
Rights relating to automated decision making and profiling: The right to know if personal data is being profiled and used in automated decision making. This is where an organisation uses personal data automatically to profile a person and make decisions that may impact on them, for example credit decisions or recruitment tests. We do not use personal data in this way.
People (data subjects) can make a request regarding any of their rights using the contact information displayed on our web site.
People are not required to pay a charge for exercising their rights. People’s rights will be considered when a request is received and their rights will differ depending on the lawful basis for which we are processing their personal information. We will always explain where it can or cannot agree to a request based on the legal parameters we must operate within.
If you have a concern or a complaint about how personal data has been processed by us or any aspect of your experience with us you can contact using the following details:
In writing: 44a Cold Bath Road, Harrogate, HG2 0NX
Via telephone: 07707 960628
Via email: info@harrogatepainclinic.com