GDPR Policy

General Data Protection Regulation (GDPR)

Privacy Policy for Patients

How We Use Your Information

Shenfield Private GP (Aesthetk Ltd) is committed to protecting your privacy and ensuring that your personal and medical information is handled safely, securely, and lawfully.

When you receive care from Shenfield Private GP (Aesthetk Ltd), we collect and use information about you to provide safe, effective, and high-quality healthcare. This may include sharing relevant information with other healthcare professionals or organisations involved in your care, where necessary, to ensure your health records are accurate and up to date.

We may also use anonymised information to help us monitor, improve, and maintain the services we provide. Any information used for audit, reporting, or service improvement purposes will be anonymised wherever possible so that you cannot be identified.

We will never sell, lease, or trade your personal information to third parties. Your information will only be shared where:

• It is necessary for your care and treatment
• We are legally required to do so
• You have given explicit consent

If you would like more information about how we use your data, please contact our Data Protection Officer (details below).

Data Protection

Shenfield Private GP (Aesthetk Ltd) complies fully with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

To meet our legal and ethical obligations, we have:

• Appointed a Data Protection Officer (DPO)
• Implemented and regularly reviewed data protection policies and procedures
• Maintained an Information Asset Register detailing systems and databases that hold personal and medical data
• Conducted Data Protection Impact Assessments (DPIAs) where data processing is considered high risk
• Ensured privacy notices are provided wherever personal data is collected

We also adhere to the 7 Caldicott Principles:

1. Justify the purpose for using confidential information
2. Do not use personal confidential data unless absolutely necessary
3. Use the minimum necessary personal confidential data
4. Access to personal confidential data is on a strict need-to-know basis
5. Everyone with access to personal confidential data understands their responsibilities
6. Comply with the law
7. The duty to share information can be as important as the duty to protect confidentiality

Security of Your Information

We take the security of your information seriously. We have appropriate physical, technical, and organisational safeguards in place to prevent unauthorised access, loss, or disclosure of personal data.

Our commitment to information security is reflected in our internal policies, including:

• Information Governance Policy
• Data Protection Impact Assessment Policy
• Confidentiality Policy

These policies ensure that all staff and clinicians handle information responsibly and securely.

Subject Access Requests (SARs)

You have the right to request a copy of the personal information we hold about you. This is known as a Subject Access Request (SAR).

• There is no charge for making a SAR
• You will be required to provide proof of identity
• Requests will be responded to within the statutory timeframes

Please contact our administrative team to make a request.

Employees, Contractors, and Clinicians

Shenfield Private GP (Aesthetk Ltd) also processes personal data relating to employees, self-employed clinicians, and contractors. This processing is necessary to:

• Maintain accurate employment and contact records
• Manage contracts, appraisals, and professional compliance
• Operate disciplinary or performance processes where required
• Provide occupational health support (with consent where applicable)
• Meet legal and regulatory obligations
• Provide references for current or former staff on request

We work with carefully selected clinicians and contractors who may provide services on our behalf. Where required, relevant personal data is shared with them solely for the purpose of delivering safe clinical care.

Further Information and Contact Details

If you have any questions, concerns, or requests relating to this privacy policy or how your data is used, please contact: