Last Revised: 12th July 2018

Thank you for visiting the Medcentres Plus Ltd website and for reviewing our privacy statement. We are committed to protecting the privacy rights of our customers and patients. This statement explains the personal information or data we and any of our associated services or trading styles (e.g. the Salisbury Cosmetic and Beauty Clinic) collect from you and how we handle and protect personal information.
It should be read in conjunction with our other policies including Data Protection and Confidentiality Statements.

Your personal information or data is any information that identifies you, authenticates you, and can be linked to you and your transactions, behaviours, or preferences. Some of your information is classed as “special category data”, this can include for example information about your treatment or medical history. This type of data must be handled even more sensitively.

As a patient of Medcentres Plus the services provided to you may be provided by a clinician. These clinicians may not be directly employed by Medcentres Plus but operating under “practising privileges”. This means we help facilitate them to provide services directly to you. They may use our systems to do this and will also make decisions about what information is collected about you and may maintain their own set of medical records in relation to any treatment or advice they provide. You should be aware that they are a Data Controller in respect of any personal information which they hold within their own records. This means that they must comply with data protection legislation and relevant guidance when handling your personal information. We also require clinicians we work with to follow our policies and procedures including this privacy statement.

What personal information do we collect and use from patients and customers?

The personal information we collect may include special category data such as medical information or personal information such as your name, address and contact details. All information is processed in accordance with this Privacy Notice and any associated policies such as our Data Protection Policy and Confidentiality Policy. We collect information from three sources: (1) information you give to us directly, (2) information from other healthcare providers (3) information from third parties.
1. Information collected directly from you
This includes information collected when you enter a contract in respect of services or use services provided by Medcentres Plus and any clinician we work with. We also collect data when you complete enquiry forms or otherwise correspond with us or engage in any marketing activity.
2. From other healthcare organisations
In order to provide you with the best possible care we may need to contact other healthcare organisations such as your primary care provider or any hospital or clinician from whom you are received or have receiving care. These organisations could include:
3. From third parties
From time to time we may also collect information about you from third parties such as your insurance provider.

How will we communicate with you?

We communicate with customers and patients by various different means such as telephone, email and post. If you have provided us with contact telephone numbers, we may leave a voicemail asking you to contact us if you aren’t able to answer at the time the call is made.
Please note we do not rely on your specific consent where we need to correspond with you about your treatment. This is because we need to do this to provide you with the services you have entered a contract to receive or made an enquiry about.

What are the purposes for which your information is used?

We may use your data for various purpose where there is a legal justification for doing so. In general, we rely on the following legal justifications:

  • Enabling you to enter a contract with us or a clinician to receive services from us.
  • For the purposes of providing you with services
  • Undertaking appropriate business activities which are required to run our business and otherwise do not cause harm to you such as: quality assurance, maintaining records, developing and improving our products and services and monitoring outcomes.
  • Legal or regulatory obligations to use such personal information.
  • Using personal information to establish, exercise or defend our legal rights.
  • Where you have provided consent to our use of your personal information.

Who do we share your information with?

From time to time we may share your personal information within our business e.g. to healthcare professionals or support staff or with third parties in the interest of providing you with the best possible care, to run our business or where we are required to by law. Third parties could include: emergency contacts, NHS organisations, other healthcare providers, your insurer, Government and regulatory bodies (e.g. CQC), the police, our insurers, third party services providers such as IT suppliers and professional advisors (including in connection with and sale, transfer or disposal of the business), medical suppliers (e.g. in connection with an adverse event).

What marketing activities do we carry out?

We may also use your personal information to provide you with information about products or services which may be of interest to you where you have provided your consent for us to do so.
You can unsubscribe from our marketing emails or correspondence at any time by notifying us in writing or, in the case of email, clicking the unsubscribe link.

Your rights

Under data protection law you have certain rights in relation to the personal information that we hold about you. These include rights to know what information we hold about you and how it is used. You may exercise these rights at any time by contacting us using the details set out above at the top of the page.
There will not usually be a charge for handling a request to exercise your rights unless you make a large number of requests or it is clear that it is not reasonable for us to comply with a request. We also reserve the right to not respond to requests where it is not reasonable to do so.