menu

Data Protection Rights

Your Rights Under Data Protection

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have certain rights in relation to your personal information. When you choose to use your rights, Harbour Healthcare will:

  • Respond to your request within one calendar month (unless extended).
  • Respond in plain and clear language.
  • Confirm your identity before releasing any data.
  • Provide the information free of charge (unless it is repeated or manifestly unfounded).
  • Tell you why we are unable to comply with your request.
  • Protect the rights of other individuals when responding.

These rights apply only to living individuals. Data protection law does not apply to information about someone who has died.

1. The Right to Know How Your Information is Used

You have the right to be informed about how and why Harbour Healthcare is collecting, using and storing personal information about you.

This should happen when we collect your information, or – if we collect it from a third party – within one month.

We do not have to tell you that we are using your personal data where it may prejudice investigations, or where we are required by law to obtain the information without notice.

2. The Right to Obtain Copies of Your Information

You can ask Harbour Healthcare to provide copies of your personal information that we may have obtained, are using, or have stored about you. If you think we may hold your personal data, you have the right to receive a copy of your personal data that we hold, and to information about how and why your personal data has been processed.

This includes access to your care records. Please note that your care records may include the names and roles of staff involved in providing your care. This information is included to ensure a complete and accurate record of the care and support you receive. Staff information that is unrelated to your care, such as personal opinions or private details about staff themselves, will not be shared.

You can ask us to provide your personal data in your preferred format, including as a paper copy or in a machine-readable form. We may ask you for proof of identity before we can provide your personal data.

This right should not adversely affect the rights of other people.

To request copies of your information please email: DPO-GDPR@harbourhealthcare.co.uk

3. The Right to Correct Inaccurate Information

You can ask Harbour Healthcare to correct your personal data where you believe it is wrong.

Where we cannot legally correct your data, we will record a supplementary statement from you, explaining why you believe the data is inaccurate or incomplete. This will be placed alongside the personal information we hold.

4. The Right to Delete Your Information

You can ask Harbour Healthcare to delete any of your personal data that we hold (often referred to as “the right to be forgotten”).

This right does not apply where we are under a legal obligation to retain your information, there is a public interest in retaining it, it must be kept for public health purposes, or it may need to be retained for possible future legal claims.

How long we keep your information is explained in our Records Retention and Destruction Policy.

5. The Right to Limit the Use of Your Information

You can ask Harbour Healthcare to restrict our use of your information. This will apply where:

  • The accuracy of the information is contested.
  • The processing is unlawful but you do not want it deleted.
  • We no longer require the information, but you need it to be retained for legal claims.

6. Additional Rights

You may also have additional rights under data protection law, such as:

  • The right to transfer your information to another organisation (data portability).
  • The right to object to decisions made about you solely by automated systems.

Harbour Healthcare does not currently make any automated decisions about you.

7. Your Right to Complain

If you are unhappy with how we have handled your personal information, you have the right to complain.

  • First, you can contact our Data Protection Officer (DPO) at:
    DPO-GDPR@harbourhealthcare.co.uk
  • If you remain dissatisfied, you have the right to raise your concerns with the Information Commissioner’s Office (ICO), the UK regulator for data protection:
    www.ico.org.uk
    0303 123 1113