PRIVACY NOTICE
1. INTRODUCTION
This privacy notice outlines how Breast and Beyond collects and uses your personal data. Breast and Beyond Ltd is registered with the Information Commissioners Office. As registered Midwives Fiona Lewis are governed by the Nursing and Midwifery Council’s Code of Conduct to respect people’s right to privacy and confidentiality.
For information contact purposes:
• Our email address is info@breastandbeyond.org
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). If you do have a complaint in the first instance, please contact us so that we have the opportunity to resolve it for you.
2. CONSENT
During our communications we will collect and record personal information about you and your baby. This information will include all relevant medical information. Breast and Beyond will apply appropriate controls to ensure your information remains secure, however please be aware that communications by text, email, messenger, social media and our website may not be totally secure. As registered Midwives Fiona Lewis are governed by the Nursing and Midwifery Council’s Code of Conduct to keep clear and accurate records relevant to their practice. These records may contain your personal/medical information and that of your child, and include corresponding communication details. They may be stored both physically and/or electronically with the appropriate levels of security protection. Through signing the Breast and Beyond consent form we understand it is accepted we can process and store your sensitive data as required to deliver our services to you.
3. YOUR PERSONAL DATA
We will only use your personal data when legally required and permitted.
For Example:
• Where we need to create the contract between us.
• Necessary for our legitimate interests.
• Where we need to comply with a legal or regulatory obligation.
Purposes for processing your personal information:
Breast and Beyond collect and use personal information only as needed to deliver our services and to communicate with you about the same, or as you have requested.
Your personal information includes information such as:
• Information provided by you when completing a form on our Website
• Information provided by you in any communication between you and us including by way of telephone or email enquiries you may receive
• Information provided by you in order for us to provide our services
• Information provided by you to complete ongoing care
This will ensure a continuity of care plan is in place.
• Should we have a concern about the safety of your child then we have a legal and professional obligation to share relevant information with the relevant agencies and in this case consent is not required.
• Anonymised data may be used and shared for the purpose of internal and external audits/research.
• In the event of a complaint or claim relevant information will be shared, with your consent, with Breast and Beyond’s insurance provider and legal team.
• Photographs may be used to form part of our consultation record, for educational and publicity purposes but only with your consent.
• Financial transaction data may be shared where financial/legal requirements dictate.
5. DATA SECURITY
Breast and Beyond client records, may contain your personal/medical information and that of your child, and will likely include corresponding client communication information. These records may be stored both in a physical and an electronic format. The storage of records will be retained with the appropriate levels of electronic security controls and physical protection controls.
These controls will mitigate against unauthorised access and preserve the records data integrity. All data records in transit will be given the appropriate levels of security controls, where possible, to protect confidentiality and preserve data integrity. In the event of a personal data breach we will notify you and any applicable regulator of the breach where legally required to do so.
6. DATA RETENTION
Client data records and Information will be retained in accordance with our legal obligations to do so and in accordance with guidance from our governing bodies.
7. YOUR RIGHTS
You have certain rights in relation to the personal information we collect about you. These include the right to request access to your personal information, to request that it is erased, or that its processing is restricted, or that any inaccurate personal information is rectified though there are exemptions if the information is required by law to be published.
You also have the right to object to the processing of your personal information, or in some circumstances to obtain a copy of the personal information in machine readable format. Any such request should be submitted in writing to Breast and Beyond Ltd. You also have the right to complain about the use of your personal information to the local supervisory authority, which in the UK is the Information Commissioner’s Office (www.ico.org.uk).