This Privacy Notice sets out details of the information that I, as a clinician responsible for your treatment (and including my medical secretaries), may collect from you and how that information may be used.
In this Privacy Notice I use "I" or "mine" or "my" to refer to me as the clinician who is using your personal information.
In the event that you have any queries, comments or concerns in respect of the manner in which I have used, or potentially will use, your personal information then you should contact me directly by writing to me Dr Sivanie Sewell at Spire Gatwick Park Hospital, Povey Cross Road, Horley, Surrey RH6 0BB, and I would be happy to discuss further.
Your personal data
I am a Data Controller in respect of your personal information which I hold about you. This includes information related to your medical treatment and any images taken for your medical records, but will be likely to also include other information such as financial data in relation to billing. I comply with the data protection legislation and relevant guidance when handling your personal information, and so must any medical secretary who assists me in an administrative capacity.
I will provide your treatment from a number of hospitals and, in due course, it may be necessary for the hospitals to also process your personal data. I will do so in accordance with the law, the principles of this Privacy Notice and to the extent that it is necessary to do so. This could be where the hospitals need to arrange other healthcare services as part of your treatment, such as laboratory testing, or support other aspects of the treatment which I provide to you. In that case, the hospitals will become joint Data Controllers in respect of your personal information and they will provide you with a copy of their Privacy Notice which sets out how they will manage that information.
Your personal information will be handled in accordance with the principles set out within this Privacy Notice. This means that whenever I use your personal data, I will only do so as set out in this Privacy Notice. From time to time, I may process your personal information at a site other than the hospitals where I practice at (medical or non-medical), as may my medical secretary.
What personal information do I collect and use from patients?
I will use “special categories of personal information” (previously known as "sensitive personal data") about you, such as information relating to your physical and mental health.
If you provide personal information to me about other individuals (including medical or financial information) you should inform the individual about the contents of this Privacy Notice. I will also process such information in accordance with this Privacy Notice.
In addition, you should note that in the event you amend data which I already hold about you then I will update our systems to reflect the amendments. Our systems will continue to store historical data.
As one of my patients or if you make an enquiry via my website, secretaries or the hospitals where I practice, or directly with myself, the personal information I hold about you may include the following, but is not limited to the following:
Special Categories Personal Information
As one of my patients, I will hold information relating to your medical treatment which is known as a special category of personal data under the law, meaning that it must be handled even more sensitively. This may include the following:
The confidentiality of your medical information is important to me, and I make every effort to prevent unauthorised access to and use of information relating to your current or former physical and mental health (or indeed any of your personal information more generally). In doing so, I will comply with the Data Protection Act 2018.
From 25 May 2018, the EU General Data Protection Regulation (GDPR) and the new Data Protection Act 2018 came into action. The uses of your information in my practice will comply with the GDPR and the Data Protection Act 2018 from that date onwards.
How do I collect your information?
I may collect personal information from a number of different sources including, but not limited to:
Directly from you
Information may be collected directly from you when:
From other healthcare organisations
My patients will usually receive healthcare from other organisations, and so in order to provide you with the best treatment possible I may have to collect personal information about you from them. These may include:
Medical records include information about your diagnosis, clinic and hospital visits and medicines administered.
From third parties
As detailed in the previous section, it is often necessary to seek information from other healthcare organisations. I may also collect information about you from third parties when:
How will I communicate with you?
I may communicate with you in a range of ways, including by telephone, SMS, email, and / or post. If I contact you using the telephone number(s) which you have provided (landline and/or mobile), and you are not available which results in the call being directed to a voicemail and/or answering service, I may leave a voice message on your voicemail and/or answering service as appropriate.
To ensure that I provide you with replies to any queries, and timely updates and reminders in relation to your healthcare (including basic administration information and appointment information including reminders), I may communicate with you either directly or via my secretaries, by SMS and/or unencrypted email (where you have provided me with your SMS or email address).
I will send invoices to you or the person you have nominated to deal with your invoices via unencrypted emails, or in the post.
To provide you with your medical information (including test results and other clinical updates), I may communicate with you by email (which will be encrypted) where you have provided me with your email address. If you email me directly or via my medical secretaries information related to your personal details or your healthcare which is not encrypted, this will be taken as implied consent for unencrypted responses / replies.
Please note that although providing your mobile number and email address and stating a preference to be communicated by a particular method will be taken as an affirmative confirmation that you are happy for us to contact you in that manner, I am not relying on your consent to process your personal data in order to correspond with you about your treatment. As set out further below, processing your personal data for those purposes is justified on the basis that it is necessary to provide you with healthcare service.
What are the purposes for which your information is used?
I may 'process' your information and data for a number of different purposes including:
Note that failure to provide your information with me may mean that I am unable to set you up as a patient or facilitate the provision of your healthcare.
Disclosures to third parties
I may disclose your information to the following third parties but not limited to:
I may communicate with these third parties in a variety of ways including, but not limited to, email, post, fax and telephone.
How long do I keep personal information for?
I will keep your personal information indefinitely or for a number of years after my practice closes in the future, as your data maybe helpful for future medical treatments you may receive.
Cookies use on Dr Sivanie Sewell’s website
A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.
We use traffic log cookies to identify which pages are being used. This helps us analyse data about webpage traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.
Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
Updates to this Privacy Notice
I may update this Privacy Notice from time to time to ensure that it remains accurate.
This Privacy Notice was last updated on 24th July 2018.