Privacy Policy
 

Privacy Policy – how we look after your records

WorthMore Mental Health & Well-Being takes your confidentiality and data security very seriously.  This notice explains how we collect, process, transfer and store your personal information and forms part of our accountability and transparency to you under the General Data Protection Regulation (GDPR) and any superseding Data Protection laws.

What do we collect?

For us to look after patients we must keep a record of their name, address, date of birth and family doctor. 

We have to record information about the medical condition and treatments. We may record information about the illnesses of other family members, information from GPs, or other hospitals where treatment has been received. 
 

The Data Protection Act

All personal information about patients is kept in the clinical case notes or on computer. The Data Protection Act requires all the information is kept safely and also gives all patients certain rights. 

• Patients, or their guardians, have the right to see the information which we keep.
• All information is kept securely and only those who need it to help with treatment, have access to it.
• We only pass on the information about our patients if the other person has a genuine need to know or to protect your health.
• We only pass on the information which is needed and no more.
• You have the right to ask for us to correct incorrect data
• The Data Controller is WorthMore Mental Health & Well-Being Clinical Lead S Armstrong Worthington.

Each type of record is held for a certain amount of time before it is recognised as no longer being needed and can be confidentially destroyed. National time periods are shown in the Records Management Code of Practice for Health and Social Care 2016’ 
 

Who might we share your information with?

We may have to share information with your GP, hospitals, social services or schools. Our patients may need care from other organisations who will need information from us in order that they can plan the best treatment.

When we do share information within our organisation it is always on a need to know basis and with your express permission.

We also carry out reviews ourselves to help improve investigation and treatment, this is called Clinical Audit.

Some conditions or infectious diseases are required to be added to national registers. Sometimes this does require a patients’ name but if this is the case, we will tell you.

We may be required to pass on information from which patients can be identified without the patient’s (or their guardian’s) permission. This may be for emergency treatment or if the law demands it.