This privacy notice provides you with details of how I collect and process your personal data.
Amanda Dunbar IBCLC is run by Amanda Dunbar who is the data controller registered with the Information Commissioners Office. As an IBCLC Amanda is required to practice by IBCLE’s Code of Conduct to respect people’s right to privacy and confidentiality so protecting your privacy is fundamental to my practice.
This notice explains what information I collect from you, why I collect this information, under what circumstance this information may be shared, how long it is stored and how to access it.
My email address is amanda,dunbar1@gmail.com
My postal address is 24 Gleneagles Drive, Washington NE371PL. If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO) the UK supervisory authority for data protection issues.
I would be grateful if you would contact me first if you do have a complaint so that I can try to resolve it for you.
It is very important that the information I hold about you is accurate and up to date. Please let me know if at any time your personal information changes by emailing me at amanda.dunbar1@gmail.com
Personal information
During our contacts via phone, text, email, facebook or face to face I will collect and record personal information about you and your baby.This includes your name, address, contact telephone number, email address and GP name and contact details. Your babies name, date of birth and NHS number.
Sensitive Data
I will also record medical information about you and your baby relevant to the reasons that you have contacted me ie feeding problems.
I am required by IBCLE and My insurance company to keep clear and accurate records relevant to my practice. This is to enable me to provide safe and effective care of you and your baby. It will also allow me to contact you for follow up care and support.
These records, which will contain your personal information, include summaries of our consultations and copies of emails.
I require your explicit consent for processing sensitive data (medical information) and I will request that you complete a signed consent for this.
The personal data I collect from you will be documented on the following documents:
– Feeding assessment
I will use your personal data to:
– Register you as a new client
– Manage my relationship with you
– Manage payment
– Perform the contract between us
– To comply with legal and regulatory obligation
Whilst we take steps to ensure your information is secure, communication by text, email, messenger, social media and my website may not be secure so keep this in mind when using these methods.
I will not share your personal or medical data with any third parties except in the following situations:
– Your GP and Health Visitor may be informed in writing that you have had a consultation giving a brief summary of any care plan put in place.
– With your consent I may contact your midwife, health visitor or GP to share any relevant information to enhance the care of you and your baby.
– Should I have any concerns about the safety of your child then I have a legal and professional obligation to share information to the relevant agencies, and in this case your consent is not required.
– Anonymised data may be used and shared for the purpose of audit.
In the event of a complaint or claim, relevant information will be shared, with your consent, with my indemnity provider and legal team.
– Transaction and financial data may be shared with my accountant, bank, card machine provider and HMRC.
I require all third parties to whom I transfer your data to respect the security of your personal data and to treat it in accordance with the law.
Data security
I have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. Access to your personal and sensitive data will be limited to Amanda Dunbar.
All paper records are kept in a locked cabinet in my home. All personal and sensitive records are then scanned and stored on password protected encrypted files. Paper records are destroyed following transfer to electronic files.
All electronic devices are password protected and have security software installed.
I have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
I will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
By law medical records on children must be kept for 25 years.
For tax purposes the law requires us to keep basic information about our customers (including Contact, Identity, Financial and Transaction Data) for six years after they stop being customers.
In some circumstances I may anonymise your personal data for research or statistical purposes in which case I may use this information indefinitely without further notice to you.
Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.
You can see more about these rights at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
If you wish to exercise any of the rights set out above, please email me at amanda.dunbar1@gmail.com
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, I may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive or refuse to comply with your request in these circumstances.
I may need to request specific information from you to help me confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. I may also contact you to ask you for further information in relation to your request to speed up my response.
I will try to respond to all legitimate requests within one month. Occasionally it may take me longer than a month if your request is particularly complex or you have made a number of requests. In this case, I will notify you.
If you are not happy with any aspect of how I collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). I should be grateful if you would contact me first if you do have a complaint so that I can try to resolve it for you.
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. I do not control these third-party websites and I am not responsible for their privacy statements. When you leave my website, I encourage you to read the privacy notice of every website you visit.