5. How will we use information about you?
Your information is used to ensure the delivery and improvement of our services.
Medical Imaging Partnership is the data controller for our electronic information systems. These systems hold personal details of all patients that have been referred via:
- The NHS e-Referral system (for NHS patients)
- Secure email (such as NHS.net account used by General Practitioners or encrypted email if the patient was referred privately)
- By secure fax (Safe haven)
- MIP referral (Medical Imaging Partnership’s own referral portal)
The information held on these systems is used primarily for the purpose of administering healthcare services; it may however be used for other non-health-related purposes and shared with statutory bodies/organisations to enable them to fulfil their statutory obligations. We may also use the information within our systems for statistical analysis to see how the organisation is performing with respect to business targets and objectives and quality of care.
The information will only be shared with other organisations where there is a statutory or contractual obligation to do so, or with the agreement of the Medical Imaging Partnership Caldicott Guardian and Data Protection Officer. A Caldicott Guardian and Data Protection Officer are responsible for protecting the confidentiality of patient and service user information and enabling appropriate information sharing.
We may keep your information in a written form or on a computer. Whenever possible all information that identifies you will be removed.
5.1: For our patients, your data may be used to:
- Manage our relationship with you
- Register all patients onto our information systems
- Register new referrals for existing patients on our systems, update demographic details and health records with new referral details
- Record telephone calls made to the appointments department in relation to appointment enquiries
- Allow the preparation of health records
- Investigate complaints, legal claims or incidents
- Make sure services are planned to meet patients’ needs in the future
- Check and report on how effective Medical Imaging Partnership and the services it provides has been
- Process anonymised statistical information on organisation performance
- Address customer service enquiries made via the website
5.2: For our staff, students, recruitment candidates, contractors/ agency staff, clinicians/consultants, and suppliers, your personal data may be used to:
- Manage our relationship with you
- Fulfil our duty of care towards staff and communicate with you in the event of a major incident (e.g. in the event of a fire)
- Verify employment history, qualifications, and experience
- Validate ‘right to work’
- Assess suitability for employment during selection process
- Undertake personal development of employees
- Deliver payroll for employees
- Fulfil our duties in respect of national insurance and tax accounting
- Manage disciplinary and grievances
- Undertake due diligence and risk assessment of supply chain
6. Sharing Your Information
We may disclose your personal information for a number of reasons (to the extent necessary). This can be due to:
- Our obligation to comply with current UK legislation
- Our duty to comply with a court order
- A contractual commitment to report statutory information
- Your consent to the disclosure of your data having been provided
- Where we are required to do so by law
- The sharing of your data will ultimately benefit you as the data subject
- Our obligation to comply with our regulators
In fulfilling our obligation to provide services (healthcare and other services) we may share your data with the following:
- National Health Service (NHS) organisations
- Referral Services
- General Practitioners (your Doctor)
- Imaging Exchange Portal (a web-based portal used to allow sharing of scan images between healthcare trusts/organisations)
- Specialist consultants (medical and non-medical)
- Public Health England (PHE)
- Contracted third parties providing services or devices, medical and non-medical
- Healthcare insurance providers
- Occupational Health services (staff)
- Companies House
- Health & Safety Executive (HSE)
- Communication Service (Text alert)
- Payroll Service
7. Sharing your Information outside of the European Economic Area (EEA)
We may from time to time be required to share your information with other service providers who are outside the UK and the EU. The sharing of your information with these providers is necessary in order to provide the necessary medical device or service. The transfer of personal data internationally will be conducted with the appropriate legal mechanisms in place.
8. How long will we keep your data for?
We will keep your personal information in accordance with NHS Digital guidance ‘Records Management Code of Practice for Health and Social Care 2016’and for only as long as is lawfully necessary to conduct our business with you, and/or in accordance with our legal obligations for data retention.
9. Your rights
GDPR gives a number of rights over your data, subject to certain criteria being met. These are:
- Right of access to your personal information and supplementary information (for example your medical record). Once we have received your request, we will respond within 30 days. This information will be sent to you free of charge.
- Right to rectify/amend your personal information if it is incorrectly recorded. You have the right to question any information we hold about you that you think is wrong, out of date, or incomplete. If you do, we will take reasonable steps to check its accuracy and correct it.
- Right to object and Right to be forgotten
You have the right to object to our use of your personal information, or to ask us to delete, remove or stop using your personal information if it is no longer needed for the purpose it was collected or otherwise processed. This is known as the ‘right to erasure’ or ‘right to be forgotten’.
- Right to restrict the use of your personal information if:
- It is not accurate;
- It has been used unlawfully but you do not want us to delete it;
- It is not relevant anymore, but you want us to keep it for use in legal claims; or
- You have already asked us to stop using your personal information, but you are waiting for us to assess your request and confirm whether we are permitted to continue using the personal information under data protection law.
- Right to obtain your personal information in a portable format
You have the right to get copies of your personal information from us in a format that can be easily re-used. You can also ask us to pass on your personal information to other organisations.
You have the right to complain to the Information Commissioner’s Office (ICO)which can be found at https://ico.org.uk/. It has enforcement powers and can investigate compliance with data protection law.
10. Freedom of information
Medical Imaging Partnership is not a public authority and is not governed by the Freedom of Information Act.
11. Changes to this policy
12. Contact Us