Privacy Policy

We collect your information to enable us to provide you with health and social care services. However, your information may also be collected for other purposes that you should be aware of, such as CCTV recordings used for crime prevention, or if you make a complaint/enquiry or if you complete a survey. As we are a charity and fundraise, if you consent, your information will be held on our Hospital database. This information is not shared with any third party and is used solely for information on fundraising. In all situations, the Trust is required to comply with data protection law.

Our staff may check your details with you to ensure they are up-to-date and correct. This is important to avoid errors in your care or treatment. If your details have changed (such as your name or address), please let us know as soon as possible.

Marketing

If you have consented to our processing your personal data for marketing/fundraising purposes, in accordance with this Privacy Policy, we may send you information (via mail, email or phone) about our products and services which we consider may be of interest to you.

The Trust may decide it is appropriate to share your information with other organisations or professionals involved in your care so that you receive good quality care and to prevent you being assessed again or being asked the same questions. Ordinarily information kept by the Trust will be made available to your GP. The Trust works with many partner organisations such as social care services, educational bodies, housing associations, voluntary and community organisations. Staff should discuss with you what information they are sharing, why and with whom.

We will only consider sharing information with other organisations or professionals where we consider it an important part of delivering effective care. However, you have a right to object to your information being shared.

There are exceptional circumstances whereby the Trust may share information about you without your knowledge, for example, in an emergency where you or someone else might suffer substantial harm or distress, where it relates to a ‘communicable disease’ (such as cholera, plague, smallpox, etc) or if information is required by law (such as a court order).

As well as information that you provide to us directly, we also use information from other sources to help us provide you with safe and effective health and social care. This may include, for example:

• Information from another NHS Trust, or your GP Surgery about health care that you have received previously
• Information from any other partner organisations such as social care services, housing associations, and voluntary and community organisations.

There is a requirement for the Trust to hold a record of your information for a set length of time (which varies according to the type of information that it is). You can find further information on the rules that the Trust must follow here (this will take you to a website provided by the Information Governance Alliance – see ‘Records Management Code of Practice for Health and Social Care 2016’).

Some health records are held in paper form but most are now electronic as the NHS strives to become paperless. All of our electronic records are stored in the UK.

The Data Protection Act gives you certain rights in respect of the information we hold about you. You are able to:

• Request a copy of the information that we hold about you
• Object to the Trust using your personal data
• Request to have your personal data rectified
• Request to have your personal data erased

The Trust may refuse your request (in full or in part) where there is a legal basis to refuse and you will be notified of this.

You are entitled to a free-of-charge copy of information that we hold about you. However, the Trust may charge a ‘reasonable fee’ for particularly bulky, complex or repetitive requests (for the same information) based on the administrative cost of providing the information.

The Trust must provide you with the requested information (where it is appropriate to provide) within 30 calendar days once it has sufficient details to be able to process the request. However, the Trust may extend this period up to 90 calendar days or refuse to respond for bulky, complex or repetitive requests.

Submit your request in writing to either:

enquiries@tetburyhospital.co.uk

or

Head of IT & Administration,
Tetbury Hospital Trust Ltd,
Malmesbury Road,
Tetbury,
GL8 8XB

You have the right to object to the Trust using/sharing your information, however, there is no automatic right to prevent the Trust using/sharing your information.

Objections will be considered and you will be notified of the Trust’s decision and reason for its decision.

Where we have asked for your consent to collect and use your information, you have the right to withdraw that consent at any time.

You are entitled to have personal data rectified if it is inaccurate or incomplete.

The Trust must respond within 30 calendar days. However, the Trust may extend this period up to 60 calendar days for complex requests.

The Trust may refuse the request if it believes the information is accurate/complete or there is a legal basis to refuse and you will be notified of this. You have the right to complain to the Information Commissioner’s Office and to seek correction by order of a Court.

This is more commonly known as the ‘right to be forgotten’. You may request to have your data erased where:

• It no longer needs to be kept by the Trust (it has surpassed the minimum retention period)
• Where you withdraw your consent or object to the use of your data and there is no requirement for the Trust to retain the data
• It has been used unlawfully
• The Trust must comply with a legal obligation
• You are under 16 and data has been stored electronically by the Trust at your request.

The Trust may refuse your request (in full or part) where there is a legal basis to refuse and you will be notified of this.

The Trust is required to provide evidence of the steps it takes to ensure information is used appropriately.

You can contact the Trust’s Information Governance Manager (Jane Jones, Head of IT & Administration) at janejones@tetburyhospital.co.uk or the Trust’s Accountable Officer (Laura Williams, Chief Executive Officer) at laurawilliams@tetburyhospital.co.uk.

If we cannot resolve your concern, you have the right to lodge a complaint with the Information Commissioners Office.