This Privacy and Cookies Policy relates to all data collection and data processing by Dr Jessica Harland through this website and its booking platform and electronic medical notes (provided by Heydoc)

For the purposes of this Privacy Statement Policy any reference to “we” shall mean Dr Jessica Harland and any administrators of her practice. 

​

This Privacy Statement Policy describes how we collect, use and safeguard the personal information you provide.  it is subject to change at any point.

​

It also describes your choices regarding the use, access and deletion of your personal information.

If you think that we are not abiding by our Privacy Statement Policy, you should first contact the data protection officer to voice your concerns.

​

Data Controller

​

The Data Controller and Data Protection Officer is Dr Jessica Harland, contactable by email at drjessicaharland@gmail.com

​

Legal Basis for Processing of Data

As a healthcare provider, Dr Jessica Harland will be processing healthcare related data. This is necessary for the purposes of preventative medicine and/or medical diagnosis.

​

Data Sharing

We do not share personal data with marketing teams, nor do we use personal data for our own marketing purposes.

Data will only be shared with third parties with prior consent and will only be shared for the healthcare purposes, such as referral for specialist treatment or information provision to NHS General Practitioners.

​

How your personal data is collected

​

Online Booking Form:

The online booking form on the website collects your personal information so we may process your appointment with us. We need to collect the following information:

·       Name

·       DOB

·       Email address

·       Mobile Number

​

Website Contact Forms:

Dr Harland’s website will only collect personal information from you that is relevant to enable it to respond to a query or to provide a service which has been requested. The forms collect the following personal data:

·       Name

·       Email

·       Phone

·       Message content

​

We do not use any of your personal data collected through the website forms for marketing lists. We do NOT share, sell, copy, distribute your information in any way and security measures have been put in place to minimise the risk of your data being stolen.

​

Access to your Personal Information

We acknowledge that individuals have the right to access their own personal information at any time. Any individual that wants to either access, correct, amend or delete their personal information should make contact with the Data Protection Officer by emailing drjessicaharland@gmail.com at no cost to the individual, we will respond within 45 days.

​

Data Retention

We may retain your information for as long as you are a patient of Dr Harland or as needed to provide you with our services.

​

Website Tracking & Cookies

This website uses Google Analytics and Google Call Tracking to analyse visits to the website for internal use. No information is shared to third parties. A cookie is placed on the users browser to help track the following data points: which pages are viewed, how long a user stays on the site, whether or not a booking is made, whether or not a call has been made through the numbers displayed on the site.

The IP addresses recorded help define broad demographic information. These data points are used by us to help understand which services are most popular, how we can provide a better service and to help focus our marketing activities. The IP addresses are not linked to personally identifiable information.

​

Cookie Opt-out

You can control the use of cookies from your browser and prevent cookies from being used at all. If you reject cookies, you may still use our website the only feature which will be limited will be the location tracking on the map facility.

​

How personal information or analytic data is used by us

​

Dr Harland uses your personal details for the purposes of:

• Creating and cancelling of appointments

• Providing communication for clinical purposes such as laboratory requests or referrals with specialists or hospitals

• Sharing results with you

 

Clinical information is only ever shared by secure, password protected email but you should be aware that no form of email is 100% secure and patients should opt out if they do not wish to receive communication in this way.

 

Dr Harland also uses SMS at times to communicate directly with patients about non-sensitive information.  Again, please opt out if you do not wish to receive messages by this method. 

​

In providing this service we promise to use your data in accordance with the General Data Protection Regulation (GDPR). We will never sell, rent, share your data to other organisations. We may be required to disclose personal data in relation to lawful requests by the police or law enforcement agencies.

​

Individual Rights

Individuals have the right to be forgotten. If an individual makes a written request to be forgotten, we must remove all data from our databases, which processes are handled by our data protection officer. We will inform the individual once complete.

The GDPR includes the following rights for individuals:

·       Right to erasure (the “right to be forgotten”)

·       Right of access

·       Right of rectification

·       The right to restrict processing

·       Notifying third parties regarding rectification, erasure or restriction

·       Right to object to processing

·       Right to object to processing for the purposes of direct marketing

·       Right to object to processing for scientific, historical or statistical purposes

·       Right to not be evaluated on the basis of automated processing

​

Client Consent

​

You will be asked to consent to process and store their data during an appointment with Dr Harland

Your information will kept purely for the maintenance of meeting the healthcare needs of the client and not marketing.

All information given to Dr Harland will be kept completely confidential.  All clinical records are secure and password protected. 

No information will be passed to any third party, without your written consent. If you do not wish us to advise your NHS GP of any particular matters, please inform us during the consultation and we will ensure that this does not happen.

​

Erasure

We will be unable to erasure client medical records, which are required as evidence of our clinical practice.

Dr Harland will look at feasibility of removing records from “live” system to an archived system.

We will however, be able to delete individuals personal data from any email correspondence, booking and contact form data such as name, email, phone, DOB, contact message.