CityDoc Privacy Statement Policy
This Privacy and Cookies Policy relates to all data collection and data processing of CityDoc through the www.citydoc.org.uk website and its booking platform.
For the purposes of this Privacy Statement Policy any reference to “CityDoc” (or “our” or “us” or “we”) shall mean CityDoc.
This Privacy Statement Policy describes how CityDoc collects, uses and safeguards the personal information you provide, it is subject to change at any point.
It also describes your choices regarding the use, access and deletion of your personal information.
If you think that CityDoc is not abiding by our Privacy Statement Policy, you should first contact our data protection officer to voice your concerns.
If you have made a booking with CityDoc or contacted us through the website is the past and wish us to delete any personal information provided through the website or booking form, please contact our data protection officer.
The Data Controller is CityDoc Medical Limited, 133 Creek Road, London, SE3 8BU.
Mr Cesar Laser is the Data Protection Officer, contactable by email at [email protected]
Legal Basis for Processing of Data
As a healthcare provider, CityDoc will be processing healthcare related data (special category). This is necessary for the purposes of preventative medicine and/or medical diagnosis.
CityDoc do not share personal data with marketing teams, nor do we use personal data for our own marketing purposes.
Data will only be shared with third parties only with prior consent and will only be shared for the healthcare purposes, such as referral for specialist treatment or information provision to NHS General Practitioners.
How your personal data is collected
Online Booking Form
The online booking form on the website collects your personal information so we may process your appointment with us. We need to collect the following information:
- Email address
- Mobile Number
Website Contact Forms
CityDoc website will only collect personal information from you that is relevant to enable it to respond to a query or to provide a service which has been requested. There are 2 contact forms on the CityDoc website, one designed for the Travel pages and the other for the General Medical enquiries. Both forms collect the following personal data:
- Regarding which clinic location (if applicable)
- Message content
CityDoc does not use any of your personal data collected through the website forms for marketing lists. CityDoc does NOT share, sell, copy, distribute your information in any way and security measures have been put in place to minimise the risk of your data being stolen.
How your personal data is transmitted and stored
CityDoc has appropriate security measures in place to protect against the loss, misuse and alteration of the personal information it processes. When one of the contact or booking forms are filled in and sent through a browser, Secure Socket Layer (SSL) technology protects information by way of server authentication and data encryption between the website and server to prevent data from being intercepted. The lock icon is visible next to our website address in the browser.
However, no method of transmission over the internet is 100% secure, therefore we cannot guarantee absolute security.
Access to your Personal Information
We acknowledge that individuals have the right to access their own personal information at anytime. Any individual that wants to either access, correct, amend or delete their personal information should make contact to Data Protection Officer of CityDoc, firstname.lastname@example.org at no cost to the individual, we will respond within 45 days.
We may retain your information for as long as you are a customer or patient of Citydoc or as needed to provide you with our services.
Website Tracking & Cookies
CityDoc use Google Analytics, Facebook Pixel Tracking and Google Call Tracking to analyse visits to the website for internal use, no information is shared to third parties. A cookie is placed on the users browser to help track the following data points: which pages are viewed, how long a user stays on the site, whether or not a booking is made, whether or not a call has been made through the numbers displayed on the site.
The IP addresses recorded help define broad demographic information. These data points are used by CityDoc to help understand which services are most popular, how we can provide a better service and to help focus our marketing activities. The IP addresses are not linked to personally identifiable information.
Location Tracking Opt In
When you visit CityDoc on a page where the clinic locations are present on a map, the browser will ask users for consent as to whether it can access the users physical location through their IP address. This is to help show the nearest CityDoc clinic to the users current location.
The user can choose to ignore the message or click block. If they accept then the acceptance of IP based location tracking on CityDoc.org.uk is kept as a cookie on the users computer until a time they might delete their cookies. No information about the users location is stored on the website and cannot be accessed.
Third party cookies used by:
Facebook Pixel – We from time to time use Facebook marketing, the Facebook pixel allows use to see what pages have been viewed.
How personal information or analytic data is used by us
CityDoc uses your personal details for the purposes of providing an appointment at one of our Clinics throughout the UK. In providing this service we promise to use your data in accordance with the General Data Protection Regulation (GDPR). We will never sell, rent, share your data to other organisations. We may be required to disclose personal data in relation to lawful requests by the police or law enforcement agencies.
Individuals have the right to be forgotten. If an individual makes a written request to be forgotten, we must remove all data from our databases, which processes are handled by our data protection officer. We will inform the individual once complete.
The GDPR includes the following rights for individuals:
- Right to erasure (the “right to be forgotten”)
- Right of access
- Right of rectification
- The right to restrict processing
- Notifying third parties regarding rectification, erasure or restriction
- Right to object to processing
- Right to object to processing for the purposes of direct marketing
- Right to object to processing for scientific, historical or statistical purposes
- Right to not be evaluated on the basis of automated processing
You will be asked to consent to process and store their data during an appointment with CityDoc.
Your information will kept purely for the maintenance of meeting the healthcare needs of the client and not marketing.
All information given to Citydoc will be kept completely confidential.
No information will be passed to any third party, without your written consent. If you do not wish us to advise your NHS GP of any particular matters, please inform us during the consultation and we will ensure that this does not happen.
You are not required to give a real name in the case of our private std service.
Your consultation will happen in a closed room and chaperones will be available when required.
We will be unable to erasure client medical records, which are required as evidence of our clinical practice.
CityDoc will look at feasibility of removing records from “live” system to an archived system.
We will however, be able to delete individuals personal data from any email correspondence, booking and contact form data such as name, email, phone, DOB, contact message.