Privacy Policy

Purpose and Principles

SRGN only collects information necessary to provide safe and effective cosmetic/aesthetic care. This information is treated with respect and confidentiality and is only accessed by authorised personnel who need it to perform their duties. Our policies and practices promote dignity and protect patient privacy across all care areas.

—

What Information We Collect

We may collect and retain the following types of personal information:

– Personal Identification Information: Name, date of birth, address, phone number, email, and emergency contact details.

– Medical Information:*Your past and present medical history, general practitioner contact, treatment records, and relevant health information.

– Treatment Records:Details of proposed and provided treatments, costs, notes of discussions or incidents, and records of your consent.

– Communication Records: Relevant correspondence with other healthcare professionals, including hospitals and community services.

—

Legal Basis for Processing Data

Our legal basis for processing patient data is:

1. Consent Explicit consent from patients to store and process personal data.
2. Care Provision: Processing is necessary for delivering healthcare and ensuring appropriate and safe care.
3. Special Data Processing: Health data processing, which is required for medical diagnosis, healthcare management, and regulatory compliance.

—

Use of Information

We use your information for the following purposes:

– To Deliver Personalized Care: To provide safe and appropriate aesthetic medical services.

– To Maintain Accurate Records: For consistent care and to keep an accurate history of treatments and communications.

– To Fulfil Legal and Regulatory Requirements: To meet legal obligations and for the effective management of health systems.

– To Communicate with You We may use your contact details to send reminders, follow-up information, or clinic updates. You may opt out of marketing communications.

—

How We Protect Your Information

SRGN has implemented robust security practices to ensure the protection of your personal information. Our measures include:

– Physical Security: All records are stored in locked cabinets or secure rooms.

– Digital Security: Computer systems and electronic data are encrypted and password-protected, with two-factor authentication and secure cloud-based storage.

– Restricted Access: Only authorised staff can access your personal information. Access is monitored, and records are destroyed securely when no longer required.

—

Sharing Your Information

To support your care, we may need to share relevant information with other healthcare professionals, including:

-Healthcare Providers: Disclosure of necessary information to doctors, hospitals, or NHS authorities to ensure continuity of care.

– Limited Third Parties: In rare cases, or if legally required, we may share data with other third parties not involved in your healthcare. In all other cases, your consent is obtained before sharing any information with third parties.

All confidential information is securely sent, and precautions are in place to prevent unauthorised sharing. SRGN complies with consent and confidentiality principles, ensuring your information is only shared when necessary.

—

Patient Rights

Under GDPR and other privacy laws, you have the following rights regarding your personal information:

– Access: Request access to view or obtain a copy of your information.

– Rectification: Request correction of any inaccuracies or incomplete information.

– Erasure: Request deletion of your data, subject to legal retention requirements.

– Restriction of Processing: Request limitations on certain uses of your information.

– Portability: Request data transfer to another healthcare provider.

– Concerns: If you have concerns about how we use your data, you may contact our Data Protection Officer or the Information Commissioner’s Office (ICO).

—

Retention of Information

We retain your records while you are an active patient and for a minimum of 10 years after your last visit, in accordance with legal and regulatory requirements. This retention period may be adjusted if required by changes in legislation or specific business needs.

—

Security of Electronic Communications

SRGN Clinic ensures the confidentiality of all digital communications. All data is encrypted, with strict access controls, virus protection, and regular backups. No patient information is shared via social media or public sites. 

—

Confidentiality and Dignity

At SRGN, we value patient dignity and aim to create a respectful environment, guided by six principles:

1. Attitudes and Behaviour : Staff are trained to interact with patients respectfully, mindful of both verbal and non-verbal communication.
2. Personal Identity: We embrace patient individuality, values, and beliefs, and personalise care accordingly.
3. Personal Boundaries: We respect your personal space, including preferred names and acceptable levels of personal contact.

4.Communication: Clear, jargon-free communication is provided, with access to translation services if needed.

5. Privacy and Confidentiality: Information is shared only with consent, adhering to Caldicott principles and confidentiality standards.

6.Modesty and Protection: Your privacy is prioritised, ensuring a private environment where needed.

—

Contact Us

If you have questions about this policy or wish to exercise your rights, please contact:

Email: info@srgn.co  

For additional guidance, you may also reach the ICO at Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, or call their helpline at 0303 123 1113.

— 

This Privacy Policy reflects SRGN’s commitment to protecting your privacy and dignity. We review and update our practices to meet evolving standards in data protection and patient care.