HealthLink360 is an Independent Health Clinic and recognises the importance of protecting personal and confidential information. In all that we do we are committed to meeting our legal responsibilities regarding data protection and to working within the framework of our professional codes of conduct.
HealthLink360 is a Data Controller for the purposes of the Data Protection Act 1998 and the General Data Protection Regulations 2018. We process data under the Legitimate Interest category as well as Special Category (due to the sensitive nature of personal health data).
Our Legitimate Interest is to collect data in order to allow us to provide informed medical and psychological assessment, care and advice and to assist with the management of these services.
We comply with Special Category Data ‘h’ due to the medical and mental health nature of our services.
Information We Collect
We only collect information for the lawful basis of administering the services of HealthLink360. This information will include your contact details and where appropriate, your medical and mental health history.
This information will usually come directly from you, but may also come from your sending agency or employer.
This information will be used by our clinical staff in order to give best advice and care.
Often we require to share limited health information with your sending agency and your GP. We only share information where appropriate and with your consent. You will be asked to give written consent to sharing information and where appropriate given the option to view any information before it is shared.
HealthLink360 will never share your data for marketing purposes.
We keep information as long as is necessary. Due to the nature of the data this may be indefinitely.
We take the security of your data very seriously and are constantly improving our systems to keep up to date with security requirements and best practice. Access to your records, whether paper or electronic, are restricted to essential staff. If you have any concerns, please don’t hesitate to contact us.
Your Right to Access Data
You have the right to access your data at any time. Please do this in writing to the address below giving adequate information to allow us to identify you (eg your full name, address, date of birth) and details of what information you are requesting. We will respond within a month but depending on how much information you request it may take longer, but no more than 3 months, to provide all the information. We may charge a fee to cover administration costs where the data request involves a significant amount of time to produce.
Your Right to Complain
You have the right to complain about how we process your data. This can be done directly to us at the address below:
HealthLink360, Elphinstone Wing, Carberry, Musselburgh, EH21 8PW
You may also complain to our regulating body:
Healthcare Improvement Scotland, Gyle Square, 1 South Gyle Crescent, Edinburgh, EH12 9EB
Our Registration Number is: 00502
Information Commissioners Office, 45 Melville Street, Edinburgh, EH3 7HL
For full Details of your rights under the General Data Protection Regulations please look at the Information Commissioners Website: https://ico.org.uk/for-the-public/