Summary privacy notice

We collect personal data about you and your health, such as your name, age, address, phone number, why you're coming to our hospitals and what care you'll receive from us.

We also collect personal data about any care you have already received from us/other providers. We will not keep personal data that is not relevant to the care we will provide you with and will always let you know what personal data we collect.

We use your personal data to create a patient profile for you and to provide your care in our hospitals, and that the other doctors and nurses you see at other hospitals have a complete picture of your care.

We also have to use your personal data to assess how successful we have been in providing your care. We will make sure we follow any laws which tell us what we should and should not do with your
personal data.

We share your personal data with:

• people who look after you, from our reception team to any doctors and nurses
• other doctors and nurses who work at other hospitals if you are also seen there
• your parent or guardian (if you are under 18 and they are responsible for you)
• those who pay for your treatment (your parent or guardian, or someone else)
• PHIN, an organisation which collects information on healthcare in the UK the NHS
• organisations who do medical research and look at how the care in our hospitals could be improved and ensure it meets the high standards the law requires

Spire Healthcare generally keeps personal data about your care for 30 years after you have finished your treatment.

If you would like to know more, see our Retention Policy.

We take protecting your personal data very seriously. All personal data is held securely and we have safeguards in place to make sure that only the people who need access to your personal data can access it.

Also, we make sure that if anyone at Spire Healthcare uses your personal data, they're trained in using it carefully. If we share your personal data with other people or companies, we make sure it is done in a safe and secure way.

You have quite a few rights in respect of your personal data. For example, if you would like to see what personal data we hold on you, you can either make a subject access request or ask your parent or guardian (if you are under 18 and they are responsible for you) to make a subject access request and contact your hospital, who will provide you or your parent or guardian with a copy of that personal data.

You can also ask us to correct personal data we hold about you if it is wrong, or even delete it (although we don't always have to do so). You can also tell us if you do not want us to use your personal data in any particular way but this may mean that in some cases, we cannot treat you.

If you would like to talk to us about your data rights, you can contact our Data Protection Officer (whose contact details are set out below). If you’re under 18, you can ask your parent or guardian to help you if you like, or simply contact us and we will be as helpful as possible.

You can read more about your rights on the Information Commissioner’s Office website (which is responsible for making sure everyone in the UK treats personal data properly).

Please either send your question, or ask your parent or guardian (if you are under 18 and they are responsible for you) to pass your question, to our Data Protection Officer (email dataprotection@spirehealthcare.com or call 020 7427 9071 between 9am - 5pm, Monday to Friday) who will be able to help.

You or your parent or guardian can also read our detailed Privacy Notice.

You have the right to complain to the Information Commissioner and you can contact them.