Privacy notice for patients

Who we are

This notice explains how we handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and guidance from the Information Commissioner’s Office (ICO).

Data controller: Harjinder Singh, 158 Westoe Road, South Shields, Tyne and Wear, NE33 3PH · info@stmichaelsdentalpractice.co.uk · 0191 456 0573

What information we hold

To provide safe and effective care we hold information such as your name, contact details, date of birth, NHS number, medical, dental and family history, emergency contacts, GP details, treatment plans and consent, X-rays, photographs, scans and study models, appointment history, payment details and any complaints. Some of this is special category data, such as information about your health.

Why we use it

We use your information to provide your dental care, manage appointments and payments, meet our legal and regulatory obligations, and improve our service. Our lawful bases include the provision of health care, legal obligation, legitimate interests and, where appropriate, your consent.

Website enquiries

When you use our online forms we receive the details you enter by email. We use them only to reply to you or arrange your appointment, and never share them for marketing. Our website uses a session cookie that is essential for the forms to work securely; it is deleted when you close your browser. The map on our Get in touch page only loads from Google if you choose to show it.

Who we share it with

Where needed for your care or by law, we may share information with other dental and health professionals, your GP or consultants, dental laboratories, NHS payment authorities, HMRC, the Department for Work and Pensions (for exemptions), private dental schemes and safeguarding bodies.

How long we keep it

Patient records are kept for 11 years after your last visit or until you are 25, whichever is longer. CCTV images are deleted after 7 days unless needed.

Your rights

• To see the information we hold about you (usually free of charge)
• To have inaccurate information corrected
• To ask us to delete or restrict use of your information (clinical records may be exempt)
• To data portability, and to withdraw consent where we rely on it

You can choose whether your NHS data is used for research and planning: NHS national data opt-out.

Concerns

Please contact us first. You can also contact the ICO on 0303 123 1113 or at ico.org.uk/make-a-complaint.

A simpler children’s privacy notice is available from reception. We review this notice every year.