This privacy notice explains why we collect information about you, how that information may be used and how we keep it safe and confidential.
Why we collect information about you:
In line with Article 6 of UK GDPR, Mare St Clinic’s lawful basis of processing is underpinned by;
Consent: the individual has given clear consent for you to process their personal data for a specific purpose.
Legal obligation: the processing is necessary for you to comply with the law (not including contractual obligations). – Specific to Coronavirus testing service
Healthcare professionals that provide you with care are required by law to maintain records about your health and any treatment or care you have received within our organisation. These records help to provide you with the best possible healthcare.
We collect and hold data for the sole purpose of providing healthcare services to our service users. In carrying out this role we may collect information about you which helps us provide patient centred care, respond to your queries or send correspondence to other healthcare establishments with your consent (e.g your GP surgery). We may keep your information in written form and/or in digital form. The records may include basic details about you, such as your name and address. They may also contain more sensitive information about your health and also information such as outcomes of assessments.
Details we collect about you:
Mare St Clinic provides Private Travel health and Covid-19 Testing Services. We have broken down this privacy notice so that you can see the specific details we hold.
Whilst you are registered we will keep records of any healthcare and treatment you have received from ourselves. These records help to provide you with the best possible healthcare.
Records we may hold about you include:
Your name, address, age, contact details and next of kin
Details of your appointments, clinic visits etc
Records about your health, illness, treatment and care
Results of investigations, like laboratory tests, x-rays, etc
Information from other health professionals.
Information regarding your recent travel plans or future travel itinerary
Passport number - specific to Covid-19 testing services
How we keep your information confidential and safe:
Everyone working for an establishment participating in patient service is subject to the Common Law Duty of Confidence. Information provided in confidence will only be used for the purposes advised with consent given by the patient, unless there are other circumstances covered by the law. Mare St Clinic complies with the Care Quality Commissioners Regulation 17: Good Governance. All our staff is required to protect your information, inform you of how your information will be used and allow you to decide if and how your information can be shared. We hold information in accordance with the Data Protection Act 2018 and the General Data Protection Act. We maintain our duty of confidentiality to you at all times. We will only ever use or pass on information about you if others involved in your care have a genuine need for it. We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations), or where the law requires information to be passed on.
How we use your information:
We primarily use information to enable our clinicians to better treat you and provide your healthcare. However, we also use your information to improve our services by:
Reviewing the care we provide through clinical audit
Investigating patient queries, complaints and legal claims
Ensuring we receive payment for the care you receive
Preparing statistics on performance
Sharing your information:
We may share your personal information with other NHS organisations. For example, we may share your information for healthcare purposes with your General Practice, Hospitals and Ambulance Services where they are directly involved in your care. We may need to share information from your health records with other non-NHS organisations, including Social Services. However, we will not disclose any health information to third parties without your explicit consent to do so, unless there are exceptional circumstances, such as when the health and safety of others is at risk or where the law requires it.
We may also be asked by statutory bodies to share basic information about you, such as your name and address, but not sensitive information from your health records. This would normally be to assist them to carry out their statutory duties. In these circumstances, where it is not practical to obtain your explicit consent, we are informing you through this notice, which is referred to as a Fair Processing Notice, under the Data Protection Act that we may share that data.
These non-NHS organisations may include, but are not restricted to:
Public Health England
Please be aware that if you choose to opt-out of sharing your information, NHS healthcare staff caring for you outside of this clinic may not be aware of the treatment you have received, any allergies you suffer from and any bad reactions to medicines you have had, in order to treat you safely in an emergency. If you wish to opt-out of sharing your information then please let us know.
To ensure that adult and children’s safeguarding matters are managed appropriately, access to identifiable information will be shared in some limited circumstances where it is legally required for the safety of the individuals concerned.
The practice may be asked to share your details with other organisations in the form of private medical reports, or extracts from your medical records – perhaps to assist you for example with a private insurance payment. We will only do this once we are in possession of your explicit consent and you are entitled to have site of any report that we make about you.
We will approach the management of patient records in line with the Records Management Code of Practice for Health and Social Care. This sets the required standards for managing records for those who work within or under contract to NHS organisations in England.
Access to your information
Under the General Data Protection Regulation everybody has the right to see, or have a copy of data we hold that can identify you, with some exceptions. You do not need to give a reason to see your data. If you want to access your data you must make the request in writing. Under special circumstances, some information may be withheld. If you wish to have a copy of the information we hold about you, please contact us by emailing us on:
Subject: Subject Access Requests
You’re right to withdraw consent for us to share your personal information
At any time you have the right to refuse/withdraw consent to information sharing. The possible consequences will be fully explained to you. If you wish to discuss this, please contact by emailing us on detailing the best way for us to contact you to discuss the consent withdrawal.
Under certain circumstances we are required by law that test results for coronavirus testing have to be reported to public health authorities. Please speak to our data protection officer to find out more on how this legal obligation affects your rights.
Mobile telephone number
If you provide us with your mobile phone number we may use this to send you reminders about your appointments, links for reviewing the service or other health screening information. Please let us know if you do not wish to receive reminders on your mobile.
The General Data Protection Regulation requires organisations to register a notification with the Information Commissioner to describe the purposes for which they process personal and sensitive information. We are registered as a data controller and our registration can be viewed online in the public register at:
Any changes to this notice will be published on our website and in a prominent area at the Practice.
Complaints & Compliments
If you have concerns or are unhappy about any of our services, or should you wish to pass on compliments please contact us using the details below:
Mare St Clinic
41 Mare St
For independent advice about data protection, privacy and data-sharing issues, you can contact:
The Information Commissioner
Wycliffe House, Water Lane, Wilmslow, Cheshire
0303 123 1113