Website Privacy Policy
We are committed to protecting the privacy of all individuals using this website.
This policy explains how we use any personal information we collect from you through this website.
This website collects some personal data from users, as stated in our website provider’s Privacy Policy.
Collection of personal information
You can access most of the pages on our website without giving us your personal information. However, you may choose to provide us with your personal information on some pages of the website by completing an on-line form.
By submitting your personal information, you consent to our use of the information as set out in this privacy policy.
Use of personal information
We shall use any personal information you give to us, in accordance with this policy, and with any additional statements appearing on forms used for submitting your personal information. We shall not disclose your personal information to any third parties without obtaining your prior consent unless we are required by law to do so. In particular:
We shall use your personal information to administer, and may respond to, your request.
We shall securely store the information you supply together with any response we may provide.
If you contact us regarding the website we may use your details to reply to you. If you make a comment or complaint about other aspects of the service we may use your details to investigate your comments.
Website privacy
This website uses https to ensure data is encrypted in transmission. This encryption, known as TLS encryption protocol, allows us to protect your privacy. You can usually verify that the page is encrypted by seeing a small lock symbol in the upper left corner of your browser and the website address is prefixed with https://.
Data storage
All data obtained by us is held and used in compliance with the Data Protection Act 2018.
Links
This website contains links to other sites. We are not responsible for the privacy practices of third parties that run any other websites. Please refer to their own privacy policies for more information.
Access to your personal information
You have a right under the Data Protection Act 2018 to ask us to provide you with the information we hold about you and to have any inaccuracies corrected. If you would like to access a copy of your information, please contact the Practice Manager at your own surgery as MPA does not hold any personal data.
GDPR Policy
GDPR stands for General Data Protection Regulations.
What does this mean for patients?
The change in GDPR mean that we must get explicit permission from patients when using their data. This is to protect your right to privacy, and we may ask you to provide consent to do certain things including recording certain information about you for your clinical records. Individuals have the right to withdraw consent at any time.
- Data must be processed lawfully, fairly and transparently
- It must be collected for a specific, explicit and legitimate purpose
- It must be limited to what is necessary for the purposes for which it is processed
- Information must be accurate and kept up to date
- Data must be held securely
- It can only be retained for as long as necessary for the reasons it was collected
There are also stronger rights for patients regarding the information that practices/organisations hold about them including:
- Being informed about how data is used
- Patients having access to their own data
- Patients can request to have incorrect information changed
- Patients can restrict how their data is used
- Patients can move their data from one health organisation to another
- The right to object to patient information being processed (in certain circumstances)