Privacy Policy

This Privacy Policy governs the manner in which the website collects, uses, maintains and discloses information collected from Data Subjects (each, a ‘Data Subject’) of the website (‘Site’). This privacy policy applies to the Site and all products and services offered by Afti Ear Room.

This document refers to personal data, which is defined as information concerning any living person (a natural person who hereafter will be called the Data Subject or Users) that is or not already in the public domain.

We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, register on the site, subscribe to the newsletter, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, email address. Users may, however, visit our Site anonymously. We will collect personal identification information from Users only if they voluntarily submit such information to us. Data Subjects can always refuse to supply personally identification information, except that it may prevent them from engaging in certain Site related activities.

The General Data Protection Regulation (GDPR), which is EU wide and far more extensive than its predecessor the Data Protection Act, along with the Privacy and Electronic Communications Regulations (PECR), seeks to protect and enhance the rights of EU data subjects.

 

Information Management, Record Keeping & Patient Privacy

 

Patient Confidentiality

For the purposes of providing treatment, Afti Ear Room may require detailed medical information. We will only collect what is relevant and necessary for your treatment. When you visit our practice, we will make notes, which may include details concerning your medication, treatment and other issues affecting your health. To provide and maintain an environment where all information and disclosures regarding patients, and patient care is kept confidential within legal parameters at all times. Those procedures will comply with The Data Protection Act 1998, Access to Medical Records Act 1990 and the EU General Data Protection Regulation (GDPR) (effective from 25/05/2018).

 

Records Management

At Afti Ear Room, we have put in place a records policy for the creation, management, handling, storage and destruction of all records that ensures that records are managed and stored securely in accordance with GDPR.

To be able to process your personal data it is a condition of any treatment that you give your explicit consent to allow Afti Ear Room to document and process your personal medical data. Contact details provided by you such as telephone numbers, email addresses, postal addresses may be used to remind you of future appointments and provide reports or other information concerning your treatment where consent is given.

As part of our obligations as healthcare practitioners there may be circumstances related to your treatment and on-going care that will require to retain your records as well as sharing of your medical records with a third parties such as: medical consultants, general practitioners, surgeons and or medical insurance companies. 

All records are stored electronically on a patient management system. Any hard copies are destroyed appropriately and immediately after the relevant information have been transferred to the electronic database. Electronic records are deleted or archived, which restricts all access. Where this is required we will always inform you first unless we are under a legal obligation to comply.

 

Policy

It is the policy of Afti Ear Room that no information will be discussed outside Afti Ear Room's employment unless consent is given.

On commencement of employment at Afti Ear Room all staff within the group sign a confidentiality agreement to ensure that no information provided at shall be discussed with any person outside of Afti Ear Room unless consent has been given.

Any records required to be kept under current legislation are retained for the relevant periods prescribed by the current GDPR legislation.

The data is always held securely, it is not shared with anyone not involved in your treatment, although for data storage purposes pre-vetted staffs who have all signed an integrity and confidentiality agreement may handle it.

For marketing purposes, Afti Ear Room may also use the contact details provided by you to respond to your enquiries, including making telephone contact and emailing information to you which the practice believes may be of interest to you, once again only if we have obtained your consent.

Afti Ear Room will only collect the information needed so that we can provide you with the services you require, the business does not sell or broker your data.

We may also use your personal information to provide you with information, about products or services, which are relevant to you, where you have provided consent for us to do so.

Financial information - We will collect that you provide to us when you register on the Service information such as debit/credit card information, bank accounts, and insurance policy details relevant to provision of audiological services maybe required.

It is possible to view the Afti Ear Room website without providing any personal details. However, without registering your details you will not be able to use some of the Service.

We will only use any information that we collect from you in accordance with this Privacy Policy.

 

Individual Rights for Patients

When seeking and agreeing to treatment at Afti Ear Room, we will advise you of your individual rights. Individual rights include providing you with complete confidentiality with regard to your data.

We are also committed to providing our reasons for collecting personal information to meet and maintain your audiological needs, subject to continued agreement.

 

Accessing Your Information

You may at any time request access to and/or, if incorrect, the rectification of your personal data by contacting us at the address set out in this Privacy Policy or by e-mailing [email protected]. We reserve the right to ask you for proof of your identity and to charge you a fee of ten Great British Pounds (£10) to meet our costs in granting any data access request you make.

 

Links to other websites

Our websites may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over and accept no liability or responsibility for those websites and this Privacy Policy does not apply to those websites. Therefore, we cannot be responsible for the protection and privacy of any information, which you provide whilst visiting such sites, both Afti Ear Room and the owner or operator of that third party website will be the data controller in respect of any such information.

Please consult the terms and conditions and privacy policy of those third-party websites to find out how they will use your personal information and to establish whether they use cookies and what they may use them for.

 

Report of any Breach

Afti Ear Room recognise that a personal data breach is any breach of security leading to the destruction, loss, alteration, unauthorised disclosure of, or access to personal data.

We are committed to report any data breach where it is likely to result in a risk to your rights or freedoms, which if not addressed, could cause a ‘significant detrimental effect’. Afti Ear Room may also need to investigate any potential violations to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of its staff.

Afti Ear Room will, after assessing the facts of any alleged breach, report the nature of the breach to the Information Commissioners Office, within 72 hours. You will be informed when any breach is reported.

 

Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have in place appropriate physical, and electronic procedures to safeguard and secure the information we collect online.

In common with a number of other websites, the data that we collect from you may be transferred to a cloud service provider, which has data servers that are based outside the European Economic Area (“EEA”). By submitting your personal data, you agree to this transfer and the storing and/or processing of your personal data on these servers. We will take all steps to maintain the details in the Privacy Policy.

Appropriate security measures will be adopted to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage. However, you acknowledge that data transmission over the Internet is inherently unsecure and that we cannot guarantee the security of data you send over the Internet.

Your information will only be held for a reasonable period or as long as the law requires or permits.

 

Enquiries and Complaints

In the event that you wish to make a complaint about how your personal data is being processed by Afti Ear Room, you have the right to complain to us. Afti Ear Room will acknowledge receipt of all complaints and endeavour to investigate the complaint within 30 working days. If you do not get a response within 30 working days, you can complain to the Information Commissioner’s Office.

 

Contacting Us

For the purpose of the Data Protection Act 1998, the data controller in respect of any personal data that you submit to us is Afti Ear Room Limited, a company incorporated under England law.

If you want to know what information we hold about you or if you have any other queries in relation to this privacy policy, please contact us using the following contact information: [email protected].

 

Cookies

The Service uses cookies to ensure that you get the most out of the Service. Cookies are small text file that asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Overall, cookies helps us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share.

You can choose to accept or decline cookies on your computer for these purposes; you may change the settings on your Internet browser to reject cookies. For more information about how to do this please consult the “Help” section of your browser. This may prevent you from taking full advantage of the website.

 

Analytics

We may use an analytics service provider for service usage analysis and reporting. Analytics service providers generate statistical and other information about usage by means of cookies, which are stored on users’ computers. The information generated relating to the Service is used to help optimise our websites and improve the user experience. The analytics service provider will store this information.

 

CHANGES TO OUR PRIVACY POLICY

Afti Ear Room has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.

 

YOUR ACCEPTANCE OF THESE TERMS

By using this Site, you are agreeing to this privacy policy and consenting to Afti Ear Room processing your personal data for the purposes outlined. If you do not agree to this policy, please do not use our Site. Your continued use of the Site following the posting of changes to this policy will be deemed your acceptance of those changes. You can withdraw consent at any time by using the email address or telephone number provided at the end of this Privacy Notice.