PRIVACY STATEMENT FOR MR ARVIND MOHAN AND SURREY UPPER LIMB CLINIC LTD

Dear Patients,

Please take a few moments to familiarise yourselves with our privacy statement. This statement has been compiled in accordance with GDPR requirements in order to clarify the collecting, storing and processing of your data.

•    Mr Arvind Mohan’s private practice is operated through a limited company, Surrey Upper Limb Clinic Ltd
•    Surrey Upper Limb Clinic Ltd is registered with the Information Commissioner’s Office (ICO)
•    Data will be collected upon referral. This will include:
     1.    Name
     2.    Address
     3.    Date of birth
     4.    Contacts (tel/mob/email)
     5.    Next of kin
     6.    GP details
     7.    Medical conditions
•    Patients will be asked to verify and complete the data upon attending the outpatients department or on admission to hospital
•    All electronic data will be stored on a secure cloud-based database with all the technological encryption data
•    All paper data will be stored in a secure locked facility
•    Any devices (phones, computers) will be encrypted
•    Data will be sent securely, either by post or encrypted emails
•    Data will be shared with medical professionals including GPs, Allied Health professionals and other specialists that are involved or need to be involved in your treatment
•    Patients will be copied in on consultation records via encrypted email whenever possible
•    Some data may be shared with other departments/organisations, including:
     1.    Treating hospital
     2.    Radiology department
     3.    IT departments
     4.    Finance/accounts departments
     5.    Secretarial services
     6.    Regulatory bodies (GMC, PHIN, etc)
     7.    Medical companies directly related to the patient treatment (eg implant companies)
     8.    Lawyers (with the appropriate consent)
•    Some data may be used for research and educational purposes. If any identifiable data is required, this will only be used with patient consent
•    Patient Consent will be sought where required
•    All data processors involved in the use of patient data will be GDPR compliant
•    Appropriate contracts will be signed with data processors and other data controllers, where required
•    Data will be stored indefinitely as patients may re-present with the same medical issues many years later
•    Patient data will only be used for the purposes of treating the patient and for maintaining the medical service provided
•    Patient data will not be shared with any social media or advertising organisations. If used it will be with full informed consent and patient information will be anonymised. 
•    Any breach in data will be dealt with appropriately by informing the ICO, the patients and organisations involved. Measures will be taken to correct the breach and ensure future safe proofing.
•    Patients will need to inform us in writing if they do not wish to receive encrypted data
•    Patients will need to inform Mr Mohan, if they do not wish to share their data will those mentioned in sections 7, 8, 9 and 10 above.
•    Patients have the right to have access to their medical records with written and signed requests
•    Patients have the right to request a copy of personal information we hold about them (known as data subject access request).
•    Patients have the right to request that information held about them, which may be incorrect or has changed, to be updated or removed fully
•    If you wish to raise a complaint about the way we handle your data, then please contact us at the address below
•    If you are not satisfied with our reply or handling of your complaint, then please contact the ICO on www.ico.org.uk

For further information or requests, please contact Mr Arvind Mohan on:

Mr Arvind Mohan
Consultant Shoulder and Upper Limb Surgeon
Shirley Oaks Hospital
Poppy Lane
Shirley Oaks Village
Croydon
Surrey
CR9 8AB
Email: surreyupperlimbclinic@outlook.com
Tel: 07411556131