GMG Privacy Policy

Glasgow Medical Group Ltd (GMG Ltd) is a private medical provider specialising in healthcare services.

GMG Ltd deals directly with clients and does not engage with third-party providers.

GMG Ltd is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA).

This policy explains how we use personal data to provide healthcare services. We aim to help you understand our practices so you can make informed choices about your information.

This policy covers:

• How we collect personal data
• What we use your personal data for
• Sharing your personal data
• Retention periods
• Data storage, security, and transfers
• Your rights
• 
  

If you have any questions about how we handle your information or wish to make a data access request, please contact us.

Email: hello@gmgltd.co.uk

HOW WE COLLECT PERSONAL DATA:

Personal Details

When you receive treatment or care from our staff, we will ask you to provide basic information including:

• Full name
• Date of birth
• Home address
• Contact telephone number
• Ethnicity
• GP address
• Next of kin name and contact telephone number

Health and Medical Information

In addition, our clinicians will ask about your medical conditions and medications to ensure proper assessment and treatment.

We do not access NHS records unless provided by yourself (or parent/guardian).

WHAT WE USE YOUR PERSONAL DATA FOR:

We use your personal data for the following purposes:

• Providing medical treatment and healthcare services, which includes recording information on a patient report form.
• When necessary, sharing personal data for crime prevention purposes.
• Retaining your medical information securely and in compliance with regulatory requirements.

SHARING YOUR PERSONAL DATA WITH OTHERS:

We may share your personal data with other healthcare professionals involved in your care or with an event data controller  / NHS organisations as necessary, always with your presence and consent unless required otherwise by law.

We may also disclose information in response to legal requests or to prevent illegal activities.

RETENTION PERIODS:

We retain patient report forms for 10 years after the patient's last interaction with our clinicians, in accordance with best practice guidelines.

Clinical audit records are retained for 5 years in anonymised form.

DATA STORAGE, SECURITY AND TRANSFERS:

We store all personal health data securely on our servers and do not transmit personal data via unsecured means. If data needs to be transferred for legal purposes, it will be done using encrypted methods or approved courier services.

YOUR RIGHTS:

Under GDPR and DPA, you have the following rights:

• Withdraw consent for data processing.
• Request access to your personal data.
• Ask for rectification or erasure of your data, where applicable.
• Request restriction of processing or object to processing.
• Request portability of your data.

You may also contact the Information Commissioner's Office (ICO) if you have concerns about your data protection rights.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113 (local rate).