Legal

Data Protection Policy

The principles of data processing

Euin Steele & Partners, as a body that processes personal information, aims to comply with the 8 principles of data processing under the Data Protection Act 1998. These are that personal data must be:
1. Fairly and lawfully processed;
2. Processed for limited purposes and only processed in a manner compatible with those purposes;
3. Adequate, relevant and not excessive;
4. Accurate and kept up to date;
5. Personal data shall not be kept for longer than necessary;
6. Processed in accordance with the data subject’s rights including the data subject’s rights of access and right to object to the processing of their data in certain circumstances;
7. Secure: protected from unauthorised and unlawful processing, accidental loss;
8. Not transferred to countries outside the European economic area without adequate protection being provided to the personal data on individual subjects.

Meaning of personal data

Personal data means any information about a living individual which:
1. Identifies that individual (for example, by name, address, qualifications, credit card number, national insurance number);
2. Together with other information which is held by, or is likely to come into the possession of the data controller that will identify that individual; or
3. Includes any expression of opinion about the individual or indication of the intentions of the data controller or any other person in respect of the individual.

Personal data held

Personal data is stored electronically on our patient database and in paper format at the Practice address.

Euin Steele & Partners does not store any information on those people visiting its website.

Security of personal data

Euin Steele & Partners shall continue to take appropriate technical and organisational measures to limit the opportunity for unauthorised or unlawful processing of personal data and to guard against accidental loss or destruction of or damage to personal data. Appropriate contractual obligations shall be incorporated into contracts which Euin Steele & Partners enters into with third parties.

Euin Steele & Partners will continue to ensure that appropriate staff are employed to undertake our patient’s data processing and that they are aware of their responsibilities in relation to the processing of personal data as it applies to their area of work. Where appropriate, training will be given.

Euin Steele & Partners will review regularly the procedures by which staff process personal data.

Use of personal data held

Euin Steele & Partners collects data to be solely used in the process of eye examinations, ocular treatment of patients and the dispensing of optical appliances as required.  Also data may be used by Euin Steele & Partners to enable marketing materials to be made available to its patients.

We may check information provided with other information held by us or by others.

Right of access to personal data held

Requests for access to personal data must be made in writing to the Mr Kevin Lewis, Senior Optometrist and Practice owner enclosing evidence that they are the data subject.

Copies of personal data will be supplied to the address provided or to the permanent address held by Euin Steele & Partners.