GDPR Statement
For all appointments and enquiries, please call 0161 537 9215 or mail info@redrosehealthcare.co.uk to request an appointment online.
GDPR Statement
RedRose Healthcare is committed to protecting your personal data and processing it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This notice explains how we collect, use, store, and safeguard your personal information.
We are committed to handling your information securely, responsibly, and in accordance with applicable data protection requirements.
Information We Collect
We may collect and process the following categories of personal data:
Personal Details
Your name, date of birth, address, telephone number, and email address.
Medical Information
Your medical history, clinical records, consultation notes, treatment plans, and prescriptions.
Appointment Information
Booking details, attendance records, and correspondence with you.
Diagnostic Information
Test results and diagnostic reports.
Purpose of Processing
We process your personal and special category (health) data for the following purposes:
- To provide safe, effective, and appropriate medical care.
- To manage appointments and ongoing treatment or follow-up care.
- To communicate with you and, where appropriate, other healthcare professionals involved in your care.
- To comply with our legal, professional, and regulatory obligations.
Our lawful basis for processing includes the provision of healthcare services, compliance with legal obligations, and the management of healthcare systems and services under UK GDPR.
Data Security
We implement appropriate technical and organisational measures to ensure your personal data is kept secure and confidential. Access to your information is limited to authorised personnel who require it for legitimate clinical or administrative purposes.
Data is stored securely in accordance with applicable data protection laws and healthcare record-keeping standards.
Data Retention
We retain medical records and related information in line with applicable legal and regulatory requirements, including recognised healthcare records management guidance.
Retention periods depend on the type of record and the nature of the care provided.
Your Rights
Under UK GDPR, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request erasure of data in certain circumstances.
- Restrict or object to processing where applicable.
- Request the transfer of your data to another provider where technically feasible.
If you wish to exercise any of your rights or have questions about how your data is handled, please contact us directly.
Complaints
If you are dissatisfied with how we process your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Further information can be found at www.ico.org.uk .