PROTECTING YOUR PERSONAL DATA

GDPR

Changes to UK data privacy law are coming into effect on 25 May 2018 under the General Data Protection Regulation (GPDR), which will give individuals additional rights about the way their personal information is collected and used.

It will increase transparency and give you more control and more protection.

At Xilium Ltd, we recognise the importance of the personal information we receive, take seriously our responsibility to use it appropriately and welcome these additional protections.

How Will GDPR benefit you?

You currently have a legal right to access the personal information we hold about you and you can request your information be deleted or updated.

The new regulation will give you additional rights that require us to correct or delete any errors in the information we hold about you. You will have the right to ask us to restrict our processing and, where that processing is based on your consent, you will be able to withdraw that consent.

We will consider any objection you may have, relating to your circumstances, to any of our processing activities. You may also request a copy of the personal information we hold about you, which you provided to us, in a format that is suitable for sending to another consultant, clinician or hospital.

These changes will bring great benefit to our patients; you will have better protection of your personal information, more control and greater flexibility.

Your rights under these laws are not unqualified and, in certain circumstances, your request may be refused. You have the right to refer such instances to the Information Commissioner (ICO).

How do we gather and use your person information?

We collect your personal information in several ways. This begins with the information given to us prior to your first consultation such as your contact details and any referral letters sent from other professionals together with insurance details.

We then process this personal information primarily to fulfil our contractual services to you. By processing, we mean obtaining, recording, holding and using your data to aid in your care and treatment.

How do we share and store your personal data?

Xilium Ltd (as data controller) may share your personal information with relevant consultants and hospital staff and administration personnel to ensure the appropriate care and record-keeping is maintained throughout your treatment.

We will keep your personal information for as long as we provide you with the medical care. We may sometimes be obliged to keep your data for longer for legal, regulatory or other governance reasons.

If you have any queries about GDPR or your personal information, please contact our data protection officer by writing to:

Penelope Powell – Director

Xilium Ltd

Dobson House

Regent Centre

Gosforth

NE3 3PF