Privacy & Cookies
Who we are
This is the website of JLR O’Donnell, a Data Controller under the terms of the Data Protection Act 2017 and under the requirements of the EU General Data Protection Regulation (GDPR). At JLR O’Donnell we are committed to respecting and protecting your privacy. This privacy policy details what information we collect about you when using this website and how we use this information.
Types of data we collect
The practice holds personal data in the following categories:
- Patient clinical and health data and correspondence
- Staff employment data
- Contractor’s data
- Website enquiries
Personal details (such as your name, contact detail and email address) which you provide when submitting an enquiry via our website are recorded for a period of 1 year and are used only to contact you in relation to your enquiry. We only collect details which are required in order to deliver a service or to provide you with details about a service which we can provide.
Why we process Personal Data (what is the ‘purpose’)
‘Process’ means we obtain, store, update and archive data.
- Patient data is held for the purpose of providing patients with appropriate, high quality, safe and effective dental care and treatment
- Staff employment data is held in accordance with Employment, Taxation and Pension law
- Contractors’ data is held for the purpose of managing their contracts
- Website enquiry data is held for a period of one year (365 days) in order to allow us to contact you in relation to your enquiry and to refer to historical contacts
What is the Lawful Basis for processing Personal Data?
The Law says we must tell you this:
- We hold patients’ data because it is in our Legitimate Interest to do so. Without holding the data we cannot work effectively. We must also hold data on NHS care and treatment as it is a Public Task required by law
- We hold staff employment details because it is a Legal Obligation for us to do so
- We hold contractors’ data because it is needed to Fulfil a Contract with us
Cookies
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site.
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
You can block cookies by clicking on the Decline button on our site’s cookie notification bar. This appears at the foot of each page and your consent can be revoked or changed at any time.
You can also activate the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
Mailing Lists
We do not currently add your details to any mailing lists.
Google Analytics
Like many websites, this site uses Google Analytics to track user interaction. We use this data to determine the number of people using our site, to better understand how they find and use our web pages and to see their journey through the website. Google Analytics makes use of cookies, details of which can be found here. Disabling cookies on your internet browser will stop Google Analytics from tracking any part of your visit to pages on this website. Read more about this policy’s section on cookies.
Storage of your information
The security of your personal information is important to us and we endeavour to keep your personal details safe at all times. We use SSL to encrypt any personal information transmitted to us via email or through this website and employ best practise methods to keep this information safe.
Whilst we strive to keep this information safe please remember that no method of transmission over the Internet, or method of electronic storage is 100% secure.
Links to external sites
Our website may contain links to other websites run by other organisations. This privacy policy relates to this website only and we encourage you to read the privacy policy on any of the sites you visit. We cannot be held responsible for the practices and privacy policies of other sites even if you access them from our website.
Access to personal information
You may request to have access to the personal information we hold on you at any time and can do so by putting the request in writing to:
1 Liberton Brae
Edinburgh
EH16 6AQ
We may issue a small charge for this. You may ask for us to amend or delete this information at any time by contacting us at the same address or alternatively email us.
Who might we share your data with?
We can only share data if it is done securely and it is necessary to do so
- Patient data may be shared with other healthcare professionals who need to be involved in your care (for example if we refer you to a specialist or need laboratory work undertaken). Patient data may also be stored for backup purposes with our computer software suppliers, who may also store it securely
- Employment data will be shared with government agencies such as HMRC
Your rights
You have the right to:
- Be informed about the personal data we hold and why we use it
- Access a copy of your data that we hold by contacting us directly. We will acknowledge your request and supply a response within one month or sooner
- Check the information we hold about you is correct and to make corrections if not
- Have your data erased in certain circumstances
- Transfer your data to someone else if you tell us to do so and it is safe and legal to do so
- Tell us not to actively process or update your data in certain circumstances
How long is the personal data stored for?
- We will store patient data for as long as we are providing care, treatment or recalling patients for further care. We will archive (store it without further action) for as long as is required by the NHS or other trusted experts recommend
- We must store employment data for six years after an employee has left
- We must store contractors’ data for seven years after the contract has ended
- The storage or website enquiry data in our website database is deleted after one year
What if you are not happy or wish to raise a concern about our data processing?
You can complain in the first instance to our Data Protection Officer, who is Richard O’Donnell, and we will do our best to resolve the matter. If this fails, you can complain to the Information Commissioner at https://www.ico.org.uk/concerns, or by calling 0303 123 1113.
Changes to our privacy policy
We keep our privacy policy under regular review and we will place any updates on this page. This privacy policy was last updated on 14th May 2018.
At the JLR O’Donnell Dental Practice we take great care with all the Personal Data we hold to ensure we comply with best professional practice and with the law.