Legal
Privacy notice
This notice explains how personal information is handled for the Omniya Concierge visiting doctor service. Basuto Medical Centre is the data controller for the information described here, and “we” and “us” below mean the data controller and the clinic team acting for the service. Contact details for privacy matters are at the end of this notice.
What we collect
- Contact and booking details: your name, your phone number, where you are (hotel and room, or an address) and callback details, taken when you or a concierge desk contact us.
- Medical information: the clinical records of your consultation, examination and treatment, together with your prescriptions, test results and referrals.
- Payment information: handled by our payment providers. We do not store full card details.
What we use it for
We use your information to provide your medical care, to keep the clinical records required of a regulated medical service, to process payment, and to produce the itemised invoices and receipts you need for an insurance claim. With your consent we may also contact you afterwards about your care or about services relevant to you, and you can withdraw that consent at any time.
Legal bases
Medical information is processed under UK GDPR Article 9(2)(h), the provision of health care by professionals subject to a duty of confidentiality. Booking and payment information is processed to perform our contract with you. Clinical records are retained to meet our legal obligations as a regulated provider.
Who sees it
We share your information where your care requires it, which means the pharmacy dispensing your prescription, the laboratory processing your samples or a specialist you are referred to, and we share it with providers who process data on our behalf under contract. Nothing about your care is shared with your hotel beyond what you ask us to share. We do not sell personal information.
How long we keep it
Clinical records are retained in line with UK requirements for medical records. Booking enquiries that do not lead to care are kept only as long as needed to respond.
Your rights
You may request access to your records and correction of anything inaccurate, and, where it applies, erasure, restriction or portability. If you are unhappy with how we have handled your information, you may complain to the Information Commissioner’s Office at ico.org.uk.
Contact
Call the Concierge team on 07587 652335 about any privacy matter and your request will be passed to Basuto Medical Centre as the data controller. Practice contact details for Basuto Medical Centre are at basuto.com.