Dr Barnardo’s private practice is managed by Kent MSS Ltd; this policy explains how we use the personal information collected from you for the operation of the company business. It also describes how long that information is kept for and the limited circumstances in which we might disclose it to third parties. Kent MSS Ltd has appointed a Data Protection Officer (DPO) with responsibility for data protection compliance within the organisation. Questions about this policy, or requests for further information, should be directed to the Data Controller in the first instance.
What personal data we collect
When you register as a patient of Dr Barnardo’s we will collect:
- Your personal details, including name and address, email addresses, phone number, gender and possibly an image.
- Details of your NHS practice and contact details.
- The names and address of next of kin.
- Bank and financial details.
- CCTV images of you may be captured on our premises.
Kent MSS Ltd will only hold and process data that they feel that they have the correct consent for. The data subject has the right at any time to withdraw the consent, this consent can be withdrawn from any department within the organisation. For those under Sixteen (16) years of age, then consent will be required from a parents or guardian to process information relating to that data subject.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
How long we retain your data
Personal data will be retained for the shortest time necessary however, some medical material will require Kent MSS Ltd to hold your data after a consultation or medical treatment. Under GDPR you have the following rights to request information from the company:
- Right of access to the data (Subject Access Request)
- Right for the rectification of errors
- Right to erasure of personal data
- Right to restrict of processing or to object to processing
- Right to portability
Due to medical notes requiring data to be held for a specific time, the erasure of data may not be possible for legal obligations. Direction will be sought from the representing consultant regarding the erasure of a data subject. Some treatment and hospital notes and results will require data to be held for a specific amount of time.