This notice outlines our commitment to meeting the data protection requirements outlined in the Data Protection Act 2018, the General Data Protection Regulation (GDPR), and the guidelines set forth by the Information Commissioner’s website, as well as our professional standards and obligations. Dr. Parvesh Sedha who also serves as the Information Governance Lead, acts as the data controller. You can access this Privacy Notice on our practice website at dentistinbracknell.co.uk, at our practice reception, or by emailing info@dentistinbracknell.co.uk or calling the practice on 01344860172 

Upon joining our practice, you will be required to provide personal information. This data processing is essential for delivering optimal healthcare to you. The types of data we handle include:

• Personal data for staff and self-employed team member management
• Personal data for direct mail, email, text, or marketing purposes
• Special category data, including health records, for healthcare delivery
• Special category data, including health records and details of criminal record checks, for managing employees and contracted team members. 

We never disclose your personal details to third parties unless there is a contractual agreement for them to process data on our behalf. Additionally, we ensure confidentiality. If we plan to refer a patient to another practitioner or secondary care facility such as a hospital, we obtain the individual’s consent before sharing personal data. 

[Personal data is stored within the EU, whether in digital or hard copy format. Personal data stored in the US digitally must be with a company certified under the EU-US Privacy Shield.] 

Personal data is collected when a patient joins the practice, is referred to the practice, or subscribes to an email list. The lawful basis for processing special category data, such as patients’ and employees’ health data, is as follows: 

Processing is necessary for preventive or occupational medicine, assessing employee working capacity, medical diagnosis, providing health or social care, or managing health or social care systems and services based on Union or Member State law or a contract with a health professional.

The lawful basis for processing personal data such as name, address, email, or phone number is:

• Consent of the data subject
• Processing is necessary for the performance of a contract with the data subject or to take steps to enter into a contract

The retention period for special data in patient records is a minimum of 10 years, potentially longer for complex records to meet legal requirements. Staff records are retained for 6 years, and other personal data is retained for 2 years after the last processing. 

You have various personal data rights, including the right to be informed, access, rectification, erasure (with clinical records retained for a certain period), restriction of processing, data portability, and objection. Details of these rights are available in our Information Governance Procedures or on the Information Commissioner’s website.

You can exercise these rights, request a copy of the Privacy Impact Assessment, or make comments, suggestions, or complaints by contacting Dr. Parvesh Sedha at the practice via email (info@dentistinbracknell.co.uk), phone (01344860172), or by visiting our practice at 104 Moordale Avenue, Bracknell, Berkshire, RG42 1SY 

Additionally, you can contact the Information Commissioner’s Office (ICO) for further assistance or to file a complaint. Their contact information can be found on their website. 

For more information on related practice procedures, such as data protection policies, consent policies, and privacy impact assessments, please use the contact details provided above.