Patients Privacy Notice

​

Opera Health acts under The Southbroom Surgery to provide and support employees referred by a
company or industry.

This privacy notice explains how we use any personal information we collect about you as a
patient/employee.

Why do we collect your personal information? 

We collect and hold data for the purpose of supporting Occupational Health Services to patients
and running our organisation, which includes monitoring the quality of care that we provide. In
carrying out this role we will collect information about you which helps us respond to your queries
or secure specialist services. We will keep your information in written form and/or in digital form.
The records will include both personal and special categories of data about your health and
wellbeing. 

How do we collect your personal information?

We collect your personal information:

​

• When you contact us or we contact you regarding a service we are providing to you.

• If you contact us regarding a service we have provided to you in the past.

• We receive a referral from another health professional.

 

What types of personal information do we collect about you?

Personal information about you is collected in several ways. This can be from referral details from
your company, other Hospital information and directly from you.
 

We may collect the following types of personal information:

 

• Your name, address, email address, telephone number and other contact information

• Gender, NHS Number (if needed for communicating to NHS Services) and date of birth.

• Health (Medical) information disclosed to us during any appointments.

• Biometric data as needed.

How will we use the personal information we collect about you?

We may use your personal information in the following ways:

 

• To determine the best location to provide the care you require.

• To comply with our legal and regulatory obligations.

• To enable us to investigate any incidents, complaints or compliments we may receive.

• To help us monitor and manage our services.

 

Call recording

Recordings of calls made and received by Opera Health may be used when reviewing incidents,
compliments or complaints.

Call recordings will be managed in the same way as all other personal information processed by us
and in line with all current legislation.

 

Data processors

We may use the services of a data processor to assist us with some of our data processing
activities, but this is done under a contract with direct instruction from us that controls how the data
processor will handle patient information and ensure they treat any information in line with the
requirements of UK General Data Protection Regulation, confidentiality, privacy law, and any other
laws that apply.

How will we share your personal information?

We may share your personal information with other healthcare professionals in the organisation to
support ongoing management to achieve the best possible outcome for you. . 

Any medical or health related personal information will be treated with confidence in line with the
common law duty of confidentiality.

​

We will not share your information with people other than healthcare professionals within out
organisation without your consent unless the law allows or requires us to.
 
How long do we keep your personal information?

Opera Health and The Southbroom Surgery follow the NHS Records Management Code of
Practice for Health and Social Care 2021 which states that patient records should be retained for
10 years from the date of death. At that point, all personal data we hold on you will be securely
deleted.

​

How do we keep your personal information safe and secure?

We are committed to protecting your privacy and will only use information collected lawfully. Every
member of staff who works for our organisation has a legal obligation to keep information about
you confidential.

We adhere to the UK General Data Protection Regulation (UK GDPR), the NHS Codes of
Confidentiality and Security, as well as guidance issued by the Information Commissioner’s Office
(ICO). Every member of staff who works for an NHS organisation has a legal obligation to keep
information about you confidential.  We maintain our duty of confidentiality by conducting annual
training and awareness, ensuring access to personal data is limited to the appropriate staff and
information is only shared with organisations and individuals that have a legitimate and legal basis
for access.
 

Legal basis

Whilst investigating an incident, complaint or complement we will process your personal data on
the basis that you have provided your consent for us to do so. There may also be occasions where
is it is necessary for us to process your personal data for the performance of a task in the public
interest.

In some circumstances, we may process your personal information on the basis that:

 

•  it is necessary to protect your vital interests;

• we are required to do so in order to comply with legal obligations to which we are subject;

• in the establishment, exercise or defence of a legal claim;

• or

• you have given us your explicit consent to do so.
   

Your rights

You have a right to:

 

• access the information we hold about you;

• correct inaccuracies in the information we hold about you

• withdraw any consent you have given to the use of your information;

• complain to the relevant supervisory authority in any jurisdiction about our use of your information

In some circumstances:

- erase information we hold about you;
- receive a copy of your personal data in an electronic format and require us to
- provide this information to a third party;
- restrict the use of information we hold about you; and
- object to the use of information we hold about you.
 

You can exercise these rights by contacting us as detailed below.
 

How to contact us

If you have any questions about our privacy notice, the personal information we hold about you, or
our use of your personal information then please contact our Data Protection Officer at:

 

info@opera-health.co.uk

How to make a complaint

You also have the right to raise any concerns about how your personal data is being processed by
us with the Information Commissioners Office (ICO):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF

https://ico.org.uk/concerns

0303 123 1113

Changes to our privacy notice

We keep our privacy notice under regular review and we will place any updates on our website.
This privacy notice was last updated on 04/10/2023.