Privacy Policy

The Dr. Balse’s Centre for Oral & Maxillofacial Surgery located at Shop No. 5, Maitri Chhaya CHS, Manipada Road, Kalina, Santacruz East, Mumbai – 400098 is committed to ensuring that your personal information is kept securely and used confidentially and lawfully only by authorised individuals and bodies and is processed only for the purposes for which you have given consent and for which we have a legal basis.

Our privacy policy has been written in compliance with the new Indian IT Act which requires that: “Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.”

All of our staff at Dr. Balse’s Centre for Oral & Maxillofacial Surgery at Shop No. 5, Maitri Chhaya CHS, Manipada Road, Kalina, Santacruz East, Mumbai – 400098 and all external contacts (medical and business contacts) have a legal duty to keep your information confidential.

Where do you collect my information from and what data do you store about me?

Your personal contact information, such as your name, postal address, email and phone number may be collected from:

  • an initial enquiry made by you via our website, by email, by phone or in writing
  • a job application
  • others involved in your healthcare, such as your GP, and your consultant.

More sensitive information regarding, for example, your current physical or mental health, previous hospital visits (private), prescribed medications and financial status may be collected from time to time.

How is my information used?

We will use your information to:

  • communicate with you regarding your healthcare appointment bookings, treatments, follow-up appointments, and results and request feedback on your treatments by telephone and/or email, based on your stated preference(s).
  • provide the required healthcare services and treatments
  • maintain business records and monitor outcomes for the purposes of our own and external regulatory body quality assurance
  • provide information about you where we have a legal or regulatory obligation to do so (for example, in legal proceedings or for the prevention of fraud)
  • process applications for employment.

Who has access to this information?

Healthcare provision and support

Your medical information will be shared with those involved in your health assessment, care and treatment, which may include:

  • Consultants
  • Anaesthetists
  • Nursing staff
  • Physiotherapists
  • Radiographers
  • Medical secretaries

We may also share your medical information, where necessary to support your care, with:

  • your GP
  • the payor of your treatment – eg your health insurance company or employer
  • your nominated contacts and emergency contact

Other bodies, due to legal obligation

We may be required to provide information about you because we are legally obliged to. This may be:

  • because of a court order
  • in relation to the prevention or detection of crime by the police.

Changes to our privacy policy

If changes are made to our privacy policy we will aim to notify patients through, for example, a notice on our website.

 

Where is my information stored and how do you keep it safe?

The information we store on you is held in the UK in paper format and on our secure servers. We take every possible step to ensure that your data is stored securely and is processed and used only in accordance with the IT Act. Methods we use include:

  • Encryption
  • Controlling access to systems
  • Training our staff to make them aware of how to handle information and how and when to report when something goes wrong
  • Regular testing of our technology and ways of working including keeping up to date on the latest security updates.

How long do you keep my information for?

We retain personal data for no longer than required and in line with a detailed retention schedule. This is based on statutory requirements and legal obligations, including the Records Management Code of Practice for Health , as well as our business requirements.

Please note that this list is not exhaustive. If you would like further information on the retention period of a particular type of patient record, please email your request to [email protected].

What rights do I have regarding the storage and usage of my information?

You have certain rights, under law, regarding how your personal and medical data is stored and used. You can exercise these rights, verbally or in writing, at any time by contacting our Data Protection Officer or any of our administrative staff on (+44)0207 935 8627. There will not normally be a charge to process your request. If, for any reason, we are unable to carry out your request, we will notify you of the reasons why not. Your rights, under the General Data Protection Regulation 2018 are listed below:

Right of access

You are entitled to:

  • confirmation that we are processing your personal data
  • a copy of your personal data which is held by us
  • other supplementary information.

Right to rectification

You have the right to:

  • have inaccurate personal data rectified, or completed if it is incomplete.
  • make a request for rectification verbally or in writing.
  • receive a response within one calendar month of your request.

In certain circumstances, we may refuse a request for rectification, for example, if we consider it unfounded or excessive.

Right to erasure (or ‘the right to be forgotten’)

This right is not absolute and only applies in certain circumstances. It applies when:

  • the personal data is no longer necessary for the purpose which we originally collected or processed it for
  • we are relying on consent as your lawful basis for holding the data, and you withdraw their consent
  • we are relying on legitimate interests as your basis for processing, you object to the processing of your data, and there is no overriding legitimate interest to continue this processing
  • we are processing the personal data for direct marketing purposes and you object to that processing
  • we have processed the personal data unlawfully
  • we have to do it to comply with a legal obligation.

Right to restrict processing

You have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances.

  • when processing is restricted, we are permitted to store your personal data, but not use it.
  • you can make a request for restriction verbally or in writing.
  • we have one calendar month to respond to a request.

Right to data portability

This right only applies to information an individual has provided to a controller. It gives you the right to obtain and reuse your personal data for your own purposes across different services.

It allows you to:

  • move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability
  • take advantage of applications and services that can use this data to find them a better deal or help them understand their spending habits.

Rights relating to automated decision making

We do not use automated decision making or profiling at The Maxillofacial Clinic at 107 Harley Street.

Right to withdraw consent

You may withdraw consent for us to use your data for any purpose for which you have previously given consent. This will not affect the lawfulness of processing based on consent before its withdrawal.

To withdraw your consent, please contact our Clinic.