Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have certain rights in relation to your personal information. When you choose to use your rights, Harbour Healthcare will:
These rights apply only to living individuals. Data protection law does not apply to information about someone who has died.
You have the right to be informed about how and why Harbour Healthcare is collecting, using and storing personal information about you.
This should happen when we collect your information, or – if we collect it from a third party – within one month.
We do not have to tell you that we are using your personal data where it may prejudice investigations, or where we are required by law to obtain the information without notice.
You can ask Harbour Healthcare to provide copies of your personal information that we may have obtained, are using, or have stored about you. If you think we may hold your personal data, you have the right to receive a copy of your personal data that we hold, and to information about how and why your personal data has been processed.
This includes access to your care records. Please note that your care records may include the names and roles of staff involved in providing your care. This information is included to ensure a complete and accurate record of the care and support you receive. Staff information that is unrelated to your care, such as personal opinions or private details about staff themselves, will not be shared.
You can ask us to provide your personal data in your preferred format, including as a paper copy or in a machine-readable form. We may ask you for proof of identity before we can provide your personal data.
This right should not adversely affect the rights of other people.
To request copies of your information please email: DPO-GDPR@harbourhealthcare.co.uk
You can ask Harbour Healthcare to correct your personal data where you believe it is wrong.
Where we cannot legally correct your data, we will record a supplementary statement from you, explaining why you believe the data is inaccurate or incomplete. This will be placed alongside the personal information we hold.
You can ask Harbour Healthcare to delete any of your personal data that we hold (often referred to as “the right to be forgotten”).
This right does not apply where we are under a legal obligation to retain your information, there is a public interest in retaining it, it must be kept for public health purposes, or it may need to be retained for possible future legal claims.
How long we keep your information is explained in our Records Retention and Destruction Policy.
You can ask Harbour Healthcare to restrict our use of your information. This will apply where:
You may also have additional rights under data protection law, such as:
Harbour Healthcare does not currently make any automated decisions about you.
If you are unhappy with how we have handled your personal information, you have the right to complain.