Privacy notice

Who we are

Fuller Health & Medical is a private clinic registered with the Care Quality Commission (CQC) and part of The Resource Finder Group. Under UK data protection law we are the controller of the personal information described in this notice.

Fuller Health & Medical, 159 Princes Avenue, Hull HU5 3DL. Phone 01482 766555. Data protection lead: the Practice Manager.

What we collect

• Identity details: name, date of birth and NHS number if you give it to us.
• Contact details: address, phone number and email address.
• Health records: the reason for your visit, medical history, medication, allergies, examination findings, test and imaging results, notes and letters about your care.
• Payment records: what you paid for and how, for example by card or Clearpay. Payment is taken in clinic, not on this website, and we do not store full card numbers.
• Website analytics: if you accept analytics cookies, Google Analytics collects information about how you use our website.

Why we use your information and our lawful bases

• To register you, book and confirm appointments, and provide the care you have asked for. Lawful basis: Article 6(1)(b), performance of a contract.
• To keep accurate clinical records and meet our duties as a CQC-registered provider. Lawful basis: Article 6(1)(c), legal obligation.
• To run the clinic safely, including keeping audit logs, protecting our systems and handling complaints. Lawful basis: Article 6(1)(f), legitimate interests, balanced against your rights.

Health information is special category data. Our condition for using it is Article 9(2)(h): the provision of health care by, or under the responsibility of, a professional who owes a duty of confidentiality.

We rely on your consent for two things only: placing analytics cookies on your device, and writing to your NHS GP about your care. You can withdraw either at any time. This does not affect anything done before you withdrew.

Who we share your information with

Only where it is needed for your care or where the law requires it:

• the external laboratory that analyses your blood samples
• the external radiology provider that reports on your ultrasound and x-ray images
• your NHS GP, only where you have agreed to this
• pharmacies, where you are given a prescription to dispense
• IT providers that host our systems and patient portal, and the service that sends our appointment emails. These providers act only on our instructions
• regulators such as the CQC, and other bodies where we are legally required to share information
• insurers, only where you ask us to

We do not sell your information.

How long we keep your records

We follow the NHS Records Management Code of Practice. Adult records are kept for at least 8 years after your last contact with us. Records for children are kept until their 25th birthday, or 26th if they were 17 at their last appointment.

Your rights

• Access: you can ask for a copy of the information we hold about you. We respond within one month.
• Rectification: you can ask us to correct information that is wrong. For medical records we may add a correction note rather than change the original entry, because clinical records must show what was known at the time.
• Erasure: you can ask us to delete your information. We usually cannot delete medical records because we are required to keep them for the period above.
• Restriction: you can ask us to limit how we use your information in some circumstances.
• Portability: where we rely on contract or consent, you can ask for information you gave us in a machine-readable format.
• Objection: you can object to processing based on legitimate interests.
• Withdrawing consent: at any time, as described above.

To use any of these rights, write to the Practice Manager at the address above. We may need to check your identity first.

If you are unhappy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Security

Patient records in our portal are encrypted. Access is limited to staff who need it for their role, and we keep audit logs of who has viewed or changed a record.

Cookies

Our website sets analytics cookies only if you accept them in the cookie banner. You can change your choice at any time. See how we use cookies.

Children

For patients under 16 we treat a parent or guardian as the main contact, and we usually need their consent to register and treat a child. A young person under 16 with enough understanding and maturity to make a decision about their own care (Gillick competence) may consent to treatment themselves, and we respect their confidentiality where a clinician judges this appropriate.

Changes to this notice

We review this notice at least once a year and whenever our services or the law change. The date at the top shows when it was last reviewed.

Contact us

Fuller Health & Medical, 159 Princes Avenue, Hull HU5 3DL. Phone 01482 766555, Monday to Friday, 9am to 5pm. Data protection lead: the Practice Manager.