SF Screening and Vaccination Service Limited

Privacy Policy

Last Updated: 27th April 2024

Customer/user data protection and security is very important to us. This Privacy Policy lets you know what happens to any personal data that you provide to us, or any that we may collect from you.

This policy applies only to personal information processed by or on behalf of SF Screening and Vaccination Service LTD. This policy is in addition to the privacy policy at Woodhouse Medical Practice, which is available at:-

https://www.woodhousemedicalpractice.nhs.uk/practice-information/how-we-use-your-information/your-medical-record/

Where our website contains links to other sites, we have no influence on whether they comply with the data protection regulations. You should check their own privacy policies before providing them with personal information.

We may collect information from you when you visit our website, apply for a service, contact us by telephone or email or receive a communication from us relating to your service. If you are a business customer, this policy applies to the information you provide to us about individuals within your business (for example directors), or information about you as a sole trader or partnership.

Changes to this Policy

We may change this policy from time to time by updating this page in order to reflect changes in the law and/or our privacy practices. We will update the date at the top of this policy accordingly. We encourage you to check this policy for changes when you revisit the website.

About us and how to contact us

We are SF Screening and Vaccination Service Limited. You can contact us at [email protected]

Our address is:

SF Screening and Vaccination Service Limited

Woodhouse Medical Practice

Woodhouse Health Centre

Cambridge Road

Leeds

LS6 2SF

If you have a specific question about our policy or how we use your personal information, you should contact us at the above address or email address.

Our data protection controller is Nazia Mohammed. You can contact her at [email protected]

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. Below are explanations of the cookies we use and why:

Google Analytics

_ga_*

Google Analytics sets this cookie to store and count page views.

_ga

Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site’s analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.

__utma

This cookie is used to determine unique visitors to the site, and is written upon your first visit to this site from your web browser. The cookie is updated with each page view, and expires 2 years from being set or updated.

__utmb

This cookie is used to establish the length of your visit to the site. The cookie is updated with each page view, and expires 30 minutes from being set or updated.

__utmz

This cookie stores the type of referral used by you to reach your site, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within the site. The cookie is updated with each page view, and expires 6 months from being set or updated.

__utmv

This cookie may be set from some pages which are used to track file downloads, or which are used in advertising campaigns. The cookie is updated with each page view, and expires 2 years from being set or updated.

Further Information

Google Privacy Policy

Cookies Set by Analytics

Google Analytics Terms of Service

WordPress

wordpress_

WordPress cookie for a logged-in user.

Duration: session

wordpress_logged_in_

WordPress cookie for a logged in user.

Duration: session

wordpress_test_

WordPress cookie for a logged in user.

Duration: session

wordpress_test_cookie

WordPress test cookie.

Duration: session

wp-settings-

WordPress also sets a few wp-settings-[UID] cookies. The number on the end is your individual user ID from the user database table. This is used to customize your view of the admin interface, and possibly also the main site interface.

Duration: 1 year

wp-settings-time-

WordPress also sets a few wp-settings-{time}-[UID] cookies. The number on the end is your individual user ID from the user database table. This is used to customize your view of the admin interface, and possibly also the main site interface.

Duration: 1 year

What personal information do we collect, and how?

If you make an enquiry or appointment on the telephone or email either directly via Woodhouse Medical Practice, we will collect the information you provide to us. We may monitor and record telephone and written correspondence with you to train our staff and monitor our services.

When you attend an appointment, we will collect further information from you, which will be processed in accordance with this policy, and, to the extent the information includes information about your health, such data shall be processed as is necessary for the purposes of health or social care.

We may use your information in the following ways:

Personal information Basis for processing Purposes of processing

Name

Contact details

Financial details

Medical history

Previous vaccination details

It is necessary for the performance of our contract with you, or to take steps for entering into our contract with you To help us identify you. To provide you with the vaccinations or treatments you have requested To process your payment. To contact you with appointment reminders,and to suggest follow-up appointments To contact you regarding our services including market research and other surveys with your consent.

Name

Contact details

Service usage details, including details of any vaccinations purchased and administered Details of contact with us Web usage statistics

It is necessary to achieve our legitimate interests. Our legitimate interests include managing our business and business processes; managing risk; increasing our service provision; improving and changing our services and processes and marketing to you. To analyse your account history and improve our services. To help run (and contact you about improving the way we run) any accounts, services or products. To manage our risks and improve our business practices. To help train our staff. To market to you by post or telephone. To market to you by email or other electronic means To create statistics, analyse customer information, create profiles and create marketing opportunities (including using information about what you buy from us and how you pay for it, for example, the vaccinations you have had and any further immunisations which may be required) and to feed into our quality improvement programme via audits To provide anonymised sales statistics to our suppliers and manufacturers of vaccinations to help improve their services or for safety reasons

Name

Contact details

Financial details

Service usage details, including details of any Vaccinations purchased or administered Details of contact with us

It is necessary for us to comply with a legal obligation or to protect the vital interests of you or another individual To provide information to your GP about vaccinations which you have been given. To make data available to our regulators and other supervisory bodies, including the Care Quality Commission, National Travel Heath Network Centre and NHS England. To manage any batch or product recalls. To respect your rights under data protection or other legislation

Name

Contact details

Service usage details, including details of any vaccinations purchased or administered

You have given us your consent To market to you by email or other electronic means, including sending reminders of potential follow-up appointments.

For each new patient, a consultation form is completed. This is because we are unable to provide and safely manage the service without this information. Unless you ask us not to, we may send you reminders when your current vaccine protection runs out or when you are due for further tests, vaccinations or examinations. If you do not wish to receive such reminders, please email us at [email protected]

Aggregated information

We may convert your personal information into anonymous data and use it for research and analysis, and also provide it to our suppliers for research and analysis purposes. Anonymised aggregated personal information does not personally identify you.

Who do we share personal information with?

We may also share your information:

  • with your GP following your appointment only if you receive vaccinations from us. We will ask your consent before doing this.
  • with our pharmacy contractor for the dispensing of any vaccines and medication
  • with your employer if you have received vaccinations or other occupational health services as part of our occupational health offering, provided that your consent has been obtained before sharing results of any blood tests or outcome reports
  • with staff who are employed by Woodhouse Medical Practice but are required to process your information for the purposes of the business
  • if SF Screening and Vaccination Service Limited or substantially all of its assets are acquired by a third party, in which case personal information held by it about its customers will be one of the transferred assets
  • to make data available to our regulators and other supervisory bodies, including the Care Quality Commission, National Travel Heath Network and Centre and the Regulation and NHS England
  • if we are under a duty to disclose or share personal information in order to comply with any legal obligation
  • in order to enforce or apply our terms and conditions of supply and other agreements, or to protect the rights, property or safety of SF Screening and Vaccination Service Limited, our customers, or others e.g. in the event of a product recall or manufacturer alerts. This includes exchanging information with other companies and organisations for the purposes of fraud protection or risk prevention. We will always ask for your consent before sharing information is this way
  • We may disclose your personal information to third parties if we are under a duty to disclose or share your personal information, in order to comply with any legal regulations or good governance obligations, or in order to enforce or to protect our rights, property, or safety, or that of our customers or other persons with whom we have a business relationship

Controlling your personal information

You may withdraw your consent to receiving marketing at any time by emailing [email protected]

It is important to us that you are in control of your own information. As a result, we offer the following controls:

1. You may request access to or copies of the personal information that we hold about you. If you would like to exercise this right, please contact us at [email protected] or the address above

2. If you believe that any information we have about you is incorrect or incomplete, please contact us at [email protected] as soon as possible.

We will take steps to seek to correct or update any information if we are satisfied that the information we hold is inaccurate. You may request that we restrict our processing of your information.

3. You may request that your personal information be deleted, where it is no longer necessary for the purposes for which it is being processed and provided there is no other lawful basis for which we may continue to process such information

4. If we are processing your personal information to meet our legitimate interests (as set out above), you may object to the processing of your personal information by us. If we are unable to demonstrate our legitimate grounds for that processing, we will no longer process your personal information for those purposes

5. If you have objected to our processing as set out above

6. If we are processing your personal information automatically for the purposes of performing our contract with you, you may have the right to request that the personal information we hold about you be transferred to a third party data controller

7. You may also request that we restrict the processing of your data to that to which you have consented or for the establishment, exercise or defence of legal claims or the protection of the rights of another person, whilst we verify your data as set out in point 2 above; pending verification of our legitimate grounds as set out in point 4 above; or if the processing is unlawful or no longer necessary, but you wish us to retain your data for the purposes of establishing, exercising or defending legal claims.

Please contact us if you have any concern about how your personal information is processed at [email protected] and we will try to resolve your concerns. However, if you consider that we are in breach of our obligations under data protection laws, you may lodge a complaint with the Information

Commissioner‘s Office at ICO.org.uk

Retention of Personal Information

If you are a customer, we will retain your personal information for as long as is appropriate, bearing in mind the treatment you have received, and in accordance with guidance produced by the NHS on records management.

If you are not a customer, we may retain your personal information for 8 years after you provide it to us.

In certain circumstances, we may be required to retain your personal information for longer, where such retention is required by law or record keeping requirements, including managing our relationship with you or defending any claims.