What Personal Data Do We Hold?
In order to provide you with a high standard of Beauty Treatments and attention, we need to hold personal information about you. This personal data comprises:
How We Process The Data
Personal data about you is held in the practice’s computer system and/or in a manual filing system. The information is not accessible to the public and only authorised members of staff have access to it. Our computer system has secure audit trails and we back up information routinely.
We will retain your beauty and medical records while you are a practice patient and after you cease to be a patient, for at least 11 years or for children until the age of 25, whichever is the longer.
Disclosure Of Information
In order to provide proper and safe beauty and aesthetic care, we may need to disclose personal information about you to your GP and other health professionals or any private aesthetic schemes you are a member of. We will not share your data with anyone else without your consent.
Disclosure will take place on a ‘need-to-know’ basis, so that only those individuals/organisations who need to know in order to provide care to you and for the proper administration of Government (whose personnel are covered by strict confidentiality rules) will be given the information.
In very limited circumstances or when required by law or a court order, personal data may have to be disclosed to a third party not connected with your health care. In all other situations, disclosure that is not covered by this Code of Practice will only occur when we have your specific consent.
You have the right to confidentiality under the Data Protection Act 1998, the Human Rights Act 1998 and the common law duty of confidence (the Disability Discrimination and the Race Relations Acts may also apply). All of our staff contracts of employment contain a requirement to keep patient information confidential.
You have the right to ask for a copy of all beauty records about you. Your request must be made in writing to EGO Health and Beauty. We are required to respond to your request within 40 days.