Privacy Notice

Welcome to the Central Manchester Networks Privacy Notice.


CONTENTS
Use of your personal information
Legal basis for processing
Maintaining the confidentiality of your records
Codes of Confidentiality, Information Security and Records Management
Partner organisations
Access to personal information
National Data Opt-out
Retention of your data
Withdrawal of consent
Cookies
Updating personal details
Mobile numbers & Email addresses
Notification
Complaints

Use of your personal information This privacy notice explains why we collect information about you and how that information may be used.

Our health care professionals who provide you with our services maintain records about your health and any treatment or care you have received previously. These records help to provide our patients with the best possible healthcare.

Your records may exist in several formats including electronic, paper or a mixture of both, and we deploy many working organisations and approaches to ensure that such information is maintained within a confidential and secure environment. The records which we could hold about you may include the following information: –

 

To ensure you receive the highest levels of care, your records will be used to facilitate the care that we provide. Anonymised information held about could, on occasions, be used to help protect the health and wellbeing of the public and to help us manage our contracts with commissioners. Information could also be used within our organisation for the purposes of clinical audits which in turn will provide monitoring of the quality of the services we provide.

 

Some of this information will be used for statistical purposes and we will ensure that individuals cannot be identified. For situations where we may contribute to research projects, we will always gain your explicit consent before releasing any relevant information.
Back to top

Legal basis for processing Our ability to process your personal and healthcare data is covered by UK GDPR article 6 and for the processing of personal sensitive data by Article 9(2)h which indicates that processing of data is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems.

Back to top

Maintaining the confidentiality of your records We will take all possible care to protect your privacy and will only use information collected with the law including: –

Back to top

Codes of Confidentiality, Information Security and Records ManagementOur staff are all trained and briefed in data protection principles and understand they have a legal obligation to keep information about you confidential. They also understand that information about you will only be shared with other parties if there is an agreed need to do so or a legal reason. We will only share your data without your permission if there are very exceptional circumstances (i.e., life or death situations), where the law requires information to be passed on and / or in accordance with the Caldicot Principle 7 e.g., to share or not to share. This means that health and social care professionals should have the confidence to share information in the best interests of their patients within the framework set out by the Caldicott Principles. Whilst the Caldicott Principles were originally developed for NHS purposes, we have adopted the underlying principles to align with best practice.

 

All personal information that we manage is stored within the UK within a secure environment and we always use suitably protected methods and systems to transfer your personal information.

Back to top

Partner organisationsIt may be possible that we will share your information with other organisations, if this is required, we will apply very strong controls. The current organisations who we share data with includes: –

 

It is noted that the above list is not exhaustive, and we may contract with other external organisations to undertake processing of your personal information. These 3rd party organisations will abide with our stringent contractual conditions regarding the protection of personal data.

 

In some cases, you will be requested to provide positive consent if we intend to share your personal details with other organisations.

Back to top

Access to personal informationYou have a right under the Data Protection Act 2018, to request access to view or to obtain a copy of what information the organisation holds about you and to have it modified should it be inaccurate. The process to access your records is known as a Subject Assess Request (SAR) and the way it works is outlined below: –

 

 

In addition to the right of access, under the Data Protection Act 2018, you will also have the following rights: –

 

 

If you have provided us with your consent to process your data for the purpose of providing our services (other than for direct healthcare), you have the right to withdraw this at any time.  To do this should contact us by emailing or writing to the organisation.

Back to top

National Data Opt-out

The national data opt-out was introduced on 25 May 2018, enabling patients to Opt-out from the use of their data for research or planning purposes, in line with the recommendations of the National Data Guardian in her Review of Data Security, Consent and Opt-outs.

 

If you wish to opt-out as part of this process, please contact the practice you are registered with, and we will take the necessary action to add you name to the Opt-out list.

Back to top

Retention of your data

Your data will be retained for no longer than is necessary and in accordance with our Documentation Management Lifecycle Policy and the associated Schedule of Retention.

Back to top

Withdrawal of consent

Your data will be retained for no longer than is necessary and in accordance with our Documentation Management Lifecycle Policy and the associated Schedule of Retention.

Back to top

Cookies

This website makes use of cookies to optimise user experience. By using our website, you consent to all cookies in accordance with our Cookie Policy.

Back to top

Updating personal details

If any of your details e.g., your name, address or other personal data have changed or are incorrect you have a responsibility to inform the professional treating you who will arrange for the necessary updates to be made. This will help us to ensure that the data we hold about you is accurate and complete.

Back to top

Mobile numbers & Email addresses

If you provide us with your mobile phone number, we may use this to send you reminders about your appointments or other health screening information. Please let us know if you do not wish to receive reminders on your mobile. If you provide us with your email address, we may use this to send you reminders to make an appointment for a review. Please let us know if you do not wish to receive correspondence by email.

Back to top

NotificationThe Data Protection Act 2018 requires organisations that control data to register with the Information Commissioners Office (ICO) website www.ico.org.uk.

The organisation is registered with the ICO as a Data Controller under the Data Protection Act 2018. The registration number is ZA072410 and can be viewed online in the public register at http://www.ico.gov.uk/

Back to top

Complaints

Should you have any concerns about how your information is managed by the Organisation please contact us at: –

 

Central Manchester Networks, Victoria Mill, 10 Lower Vickers Street, Miles Platting, Manchester, M40 7LH

 

If you are still unhappy following a review by the Organisation you can then complain to the Information Commissioners Office (ICO) via their website www.ico.org.uk

 

or in writing to: –

 

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

 

If you are happy for your data to be extracted and used for the purposes described in this Privacy Notice, then you do not need to do anything. If you have any concerns about how your data is shared, then please contact us.

Back to top