Privacy Policy
Welcome to the Bath Imaging Partners privacy policy. Bath Imaging Partners respects your privacy and is committed to protecting your personal data.
The information set out in this privacy policy aims to inform you as to how we collect and look after your personal data when a referral is made to us for imaging you, when you attend a hospital for your test and when we inform the referrer of your test results. It will also tell you about your privacy rights and how the law protects you.
Please note that Bath Imaging Partners may update and amend this privacy policy from time to time and any changes will be posted on our website. This version was last updated in June 2018
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
WHO WE ARE:
Bath Imaging Partners LLP are a group of Radiologist who provide imaging services in Bath and the surrounding area.
Bath Imaging Partner members are registered with the Information Commissioner's Office (ICO).
WHY DO WE COLLECT PERSONAL INFORMATION ABOUT YOU?
The staff members working on behalf of Bath Imaging Partners need to collect information about your health and treatment, so that you can be given the best possible care. This personal information can be held in a variety of formats, including paper records and computer records.
What is our legal reason for handling your personal information?
Any personal information we hold about you is processed for the purposes of 'provision of health or social care or treatment or the management of health or social care systems' and services under chapter 2, section 9 of the Data Protection Act 2018 (subject to parliamentary approval).
For more information on this legislation please visit: www.legislation.gov.uk
What personal information do we need to collect about you and how do we obtain it?
Personal information about you is collected in a number of ways. This can be from referral details from your GP or another hospital, directly from you or from your authorised representative.
We are likely to hold the following basic personal information about you: your name, address (including letters sent to you), telephone numbers, date of birth, emergency or next of kin contacts and your GP details. We might also hold your email address, partnership or marriage status, occupation, your status ( if you are a patient who is an overseas visitor), place of birth and preferred name or maiden name.
In addition to the above, we may hold sensitive personal information about you which could include:
Notes and reports about your health, treatment and care, including:
your medical conditions
results of investigations, such as x-rays and laboratory tests
future care you may need
personal information from people who care for and know you, such as relatives and health or social care professionals
other personal information such as whether you smoke, or if you have any disabilities
Your religion and ethnic origin
Whether or not you are subject to any protection orders regarding your health, wellbeing and human rights (safeguarding status).
· Transaction Data includes details about payment instructions made by you.
It is important for us to have a complete picture of you as this will assist staff to deliver appropriate treatment and care in accordance with your needs.
What do we do with your personal information?
Your records are used to directly manage and deliver healthcare to you to ensure that:
The staff involved in your care have accurate and up to date information to advise on the most suitable care for you.
Staff members have the information they need to be able to evaluate and improve the quality of care you receive.
Appropriate information is available if you see another healthcare professional, or are referred to a specialist or another part of the NHS, social care or health provider.
The personal information we collect about you may also be used to:
remind you about your appointments and send you relevant information
review the care we provide
report and investigate complaints, claims and unexpected incidents
report events to the appropriate authorities when we are required to do so by law
Where possible, we will remove your personal details (such as your name or date of birth) when sharing information with other organisations unless there is a legal reason that permits us to use it and we will only use/ share the minimum information necessary. We will always aim to protect your personal information.
Who do we share your information with and why?
In order to support your healthcare needs, we may need to share relevant personal information with other NHS organisations such as general practitioners (GPs) or your referrer.
We will not share any health information with third parties without your consent unless there are circumstances, such as when the health or safety of others is at risk or where the law permits or requires it.
There are times when Bath Imaging Partners is required by law to share information provided to us with other official organisations. This also includes, but is not limited to, the release of information under a court order, sharing with the Care Quality Commission for inspection purposes, the police for the prevention or detection of crime or where there is a clear public interest to prevent abuse or serious harm to others and other public organisations (e.g. HMRC for the misuse of public funds in order to prevent and detect fraud). Where there is cause to do this, the Trust will always do its best to inform you of the sharing of information.
For any request to transfer your data internationally outside the UK/EU, we will make sure that an adequate level of protection is guaranteed before the transfer happens.
Bath Imaging Partners is required to protect your personal information, inform you of how your personal information will be used, and allow you to decide if and how your personal information can be shared. Personal information you provide to Bath Imaging Partners in confidence will only be used for the purposes explained to you and for which you have given permission.
How do we maintain your records?
Your personal information is held in electronic forms on standard NHS systems for specified periods of time as set out in the NHS Records Management Code of Practice for Health and Social Care and National Archives Requirements.
We hold and process your information in agreement with the Data Protection Act 2018 (subject to Parliamentary approval) as amended by the General Data Protection Regulations 2016. In addition, everyone working for the NHS must follow the Common Law Duty of Confidentiality and various other national standards.
We have a duty to:
maintain full and accurate records of the care we provide for you
keep records about you confidential and secure
provide information in a format that is accessible to you
Use of Email:
Some services in the Trust provide the option to communicate with patients via email. Please be aware that the Trust cannot guarantee the security of this information whilst in transit, and by requesting this service you are accepting this risk.
What are your rights?
If we need to use your personal information for any reason apart from those mentioned above, we will contact you and ask for your consent. The Data Protection Act 2018 (subject to parliamentary approval) gives you certain rights, including the right to:
Request access to the personal data we hold about you, e.g. health records. The way in which you can access your own health records is explained in more detail in our 'Access to Health Records – Information for Applicants.'
Request the correction of inaccurate or incomplete information recorded in our health records, subject to certain safeguards. This is also explained in our 'Access to Health Records - Information for Applicants.'
Withdraw consent to the sharing of your health records: Under the Data Protection Act 2018 (subject to parliamentary approval), we are authorised to share your health records 'for the management of healthcare systems and services'. Your consent will only be required if we intend to share your health records beyond these purposes, as explained above (for example for research). Any consent form you will be asked to sign will give you the option to 'refuse' consent and will explain how you can remove any given consent at a later time. The consent form will also warn you about the possible consequences of such refusal.
Request your personal information to be transferred to other providers on certain occasions.
Object to the use of your personal information: The NHS uses patient data for research, to find ways to improve treatments and identify causes of and cures for illnesses, and for planning purposes, to improve and enable the efficient and safe provision of health and care services. For more information, or if you do not want your data used for research and planning purposes, please visit the NHS Digital national data opt-out programme web site.
We will always try our best to keep your information confidential and only share information when absolutely necessary.
CONTACT DETAILS AND COMPLAINTS
Our full details are:
Full name of legal entity: Bath Imaging Partners
Email address: ruh-tr.bip@nhs.net
Postal address: Bath Imaging Partners, Department B7, Royal United Hospital, Bath, BA1 3NG
Telephone number: 01225 684543
You have the right to make a complaint at any time to the ICO, the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.