Privacy Policy

Oxford Gut & Liver is an Association formed by Consultant Doctors registered with the General Medical Council (GMC).  Our aim is to promote awareness of medical conditions affecting the gastrointestinal tract and liver and to increase access to the highest quality of specialist private medical care within the Oxford region.

This privacy notice sets out our privacy and data management policy for all medical and administrative staff (directly employed, agency, contract, volunteers, third parties, associates or clinics) working with the Association as a whole or its members in their individual capacity as Consultant Practitioners registered with the GMC - in order to provide medical services and healthcare. This notice is in accordance with the General Data Protection Regulation (GDPR) of the European Union, 2016.

Individual Hospitals, Clinics and Diagnostic services may also have their own privacy policies, but by and large these will be broadly equivalent as required by law. To view those notices, please visit the relevant website or contact us.

The lawfulness of the processing of personal data is set out in Article 6(1)(e), while the lawful basis for processing special category health data is set out in Article 9(2)(h).

We will:

1. Use your personal data lawfully in accordance with Article 6(1)(e) of GDPR, for the sole purpose of managing your medical care
2. Keep your information confidential in accordance with our professional duty of confidentiality and with common law.
3. Keep paper medical records stored securely for up to 7 years after last clinical contact
4. Share those relevant medical and personal details that are necessary and specific to your medical issues with relevant other medical practitioners, allied health professionals (such as nurses, pharmacists, dieticians), relevant administrators/secretaries and practice managers within these practices and, if specifically requested for an appropriate reason, your medical insurer.
5. Only share details with other people or bodies (such as an employer) with your explicit written consent. *Exceptions can occur where there is a vital interest such as significant risk of injury or death (e.g. Police, DVLA).
6. Process your data for the legitimate management of the record keeping of individual Consultants or those facilities and hospitals used for treatment or diagnostic services
7. Provide you with access to copies of notes or letters related to your medical care, where reasonable, within 30 days of a formal written request from you. If this is not possible for whatever reason, I will provide a written explanation within 30 days.
8. Gladly correct any errors that you may identify in your medical records.

We will not:

1. Use your personal information for any marketing purposes.
2. Share your data with any other third party other than for reasons specified above.
3. Use your personal or medical information for medical or scientific research without your informed, explicit, specific, written consent.
4. Publish your personal or medical information in a scientific or medical journal without your informed, explicit, specific, written consent.