Legal & privacy
Privacy Policy
This policy explains how the private oncology practice of Dr Omar Din, Consultant Clinical Oncologist, collects, uses and protects your personal and health information, and the rights you have over it.
[Template — please review with your data protection adviser and replace any details that differ for your practice] This is a starter template provided to help you publish a compliant privacy policy. Please check every section carefully before relying on it.
1. Who we are and how to contact us
This website and practice are operated by Dr Omar Din, Consultant Clinical Oncologist (GMC 4407876), providing private oncology care based at Circle Health Thornbury, 312 Fulwood Road, Sheffield, S10 3BR, with radiotherapy and treatment delivered at partner centres including GenesisCare Oxford, Nottingham and Guildford, and HCA Outpatients The Shard, London.
Dr Omar Din is the data controller responsible for your personal information. To contact us about this policy or your data:
- Email: drodin@drodin.co.uk
- Phone: 0114 267 4725
- Post: Dr Omar Din, Circle Health Thornbury, 312 Fulwood Road, Sheffield, S10 3BR
[Template placeholder — if a Data Protection Officer has been appointed, name them and their contact details here; otherwise remove this line.]
2. The information we collect
Depending on your care, we may collect and hold:
- Personal details — such as your name, date of birth, address and identifiers.
- Contact details — telephone number, email address and preferred contact method.
- Health and medical information — including your medical history, diagnoses, referral letters, scans and images, treatment plans, radiotherapy and chemotherapy records, and correspondence with your GP and other clinicians.
- Administrative and financial details — insurance details, membership numbers, and billing information.
Health and medical information is treated as special category data under UK data protection law and is handled with particular care.
3. How we use your information
We use your information to:
- Provide and coordinate your oncology care and treatment.
- Arrange appointments, consultations, radiotherapy and chemotherapy.
- Communicate with your GP, referring clinician and other members of your care team.
- Manage billing, invoicing and correspondence with your insurer.
- Meet our legal, regulatory and professional obligations, including clinical governance and record-keeping.
4. Lawful basis for processing under UK GDPR
We rely on the following lawful bases under UK GDPR and the Data Protection Act 2018:
- Provision of healthcare — processing necessary for medical diagnosis and the provision of health or treatment (Article 9(2)(h)), carried out by, or under the responsibility of, a professional bound by a duty of confidentiality.
- Legal obligation — where we must process information to comply with the law.
- Legitimate interests — for the effective administration of the practice, balanced against your rights.
- Consent — where we ask for it, for example certain communications; you may withdraw consent at any time.
5. How we share your information
We only share your information where it is necessary for your care or where the law allows. This may include:
- Other clinicians involved in your care, including your GP and referring specialists.
- Hospitals and treatment centres, such as Circle Health Thornbury, GenesisCare (Oxford, Nottingham and Guildford) and HCA (including HCA Outpatients The Shard, London).
- Your medical insurer, for the purpose of arranging and settling payment for your treatment.
- Regulatory and professional bodies where we are required to do so.
We do not sell your information, and we do not share it for marketing purposes without your consent.
6. How long we keep your information
We keep your medical records in line with recognised medical record retention guidance and our legal and professional obligations. Records are retained for as long as necessary to support your ongoing care and to meet regulatory requirements, and are securely disposed of when no longer needed.
[Template placeholder — confirm the retention periods that apply to your practice and treatment centres.]
7. How we keep your information secure
We take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access. This includes secure storage, controlled access to records, and a duty of confidentiality on everyone involved in your care. Where partner hospitals and treatment centres hold your records, they are responsible for their own security arrangements.
8. Your rights under UK GDPR
Subject to certain conditions, you have the right to:
- Access the personal information we hold about you.
- Rectification of information that is inaccurate or incomplete.
- Erasure of your information in certain circumstances.
- Restriction of how we process your information.
- Object to certain processing.
To make a request, please contact us by email at drodin@drodin.co.uk or by phone on 0114 267 4725. We may need to verify your identity before responding.
9. Complaints
If you have a concern about how we handle your information, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk.
[Template placeholder — if the practice holds an ICO registration number, state it here.]
10. Changes to this policy
We may update this policy from time to time to reflect changes in our practice or the law. The latest version will always be published on this page.
Last updated: [Template — insert date]
If you have any questions about this policy or your personal information, please contact us by email at drodin@drodin.co.uk or by phone on 0114 267 4725, and a member of the team will be glad to help.