This policy covers all data that is shared by a Barnabas Patient Voices member, contact or visitor to our website, barnabasvoices.org.uk, by email, or off-line.
The policy provides you with an explanation as to what happens to any personal data you share with us, or that we collect from you; it is also the basis for what is allowable activity by Barnabas Patient Voices officers and volunteers.
For the purpose of the Data Protection Act 1998 and other UK and European data protection legislation, our data controller is the Barnabas Patient Voices Chairman (see contact details below).
1. Information We Collect
We may collect and process the following data about you:
- we require your name, email address, postcode, a username, and your relationship to Barnabas Medical Centre in order to register you as a member of Barnabas Patient Voices
- if you are an off-line member we will also store your mailing address in order to be able to send you relevant information
- details of your visits to our website and the resources you access, including but not limited to traffic data, location data, weblog statistics and other communication data as logged automatically by our ISP (and which we cannot control)
- information that you provide by filling in forms on our website, such as when you register, or email us
- information provided by you to us when you communicate with us for any other reason.
We do not:
- hold information on gender, ethnicity, disability, age, sexual orientation or religion
- hold any medical information
- ask for your mailing address (except as above) or phone number(s), although you may volunteer this information.
2. Use of Your Information
The information we collect and store relating to you is primarily used to enable us to provide our services to you, specifically:
- membership and membership benefits
- information which you request from us (where we are legally permitted to share it).
We do not release personal data to any third party, for any reason, except where legally required to do so.
We do not routinely monitor or record telephone conversations, although on very rare occasions we may request your permission to do so.
If you do not want us to use your data, or to contact you, please contact us (see below). We are legally required to delete your information should you so request.
3. Databases & Mailing Lists Containing Personal Data
Barnabas Patient Voices keeps two mailing lists:
- Online Membership List. The online database of those Barnabas Patient Voices members registered to our website and held in the website user directory.
- Offline Membership List. Those Barnabas Patient Voices members who do not have, or do not wish to share, their email address. This list will include your mailing address.
Persons requesting removal/deletion of their data will be removed from both the above mailing lists, unless requested otherwise.
These mailing lists may be shared with our parent body Barnabas Medical Centre (normally through the Practice Manager) for (a) security/backup and (b) to verify that members are registered patients (or carers).
4. Storing Your Personal Data
All data held by us is, to the best of our knowledge, retained only on stand-alone computers and/or servers located within the United Kingdom and is not transmitted outside the UK.
As required by the Data Protection Act 1998 data is retained only for the minimum length of time required to provide you with the agreed services and to comply with current legislation.
The transmission of information via the internet is not completely secure and we cannot guarantee the security of data sent to us electronically. Transmission of such data is therefore entirely at your own risk.
Where you have a password allowing you access to the barnabasvoices.org.uk website, you are responsible for keeping this password confidential.
5. Disclosing Your Information
The Society’s Membership List is held by the Chairman of Barnabas Patient Voices.
The membership lists will from time to time be made available to the Barnabas Medical Centre Practice Manager on a strictly “need to know” basis in order to ensure (a) security/backup and (b) the registered patient (or carer) status of members.
We never pass personal information about any individual to other organisations, individuals or third-parties except with the express permission of the individual concerned, or when legally required to do so.
6. Third Party Links
You may find links to third party websites on our barnabasvoices.org.uk website. These third party websites should have their own privacy policies which you should check. We do not accept any responsibility or liability whatsoever for their policies as we have no control over them.
7. Access To Information
The Data Protection Act 1998 gives you the right to know what information we hold about you, to have the data corrected if in error, or have it deleted. Should you wish to receive the details that we hold about you please contact us using the contact details below.
8. Agreement
Where required you will be asked to give consent to us holding your data as specified in section 1 above.
If you are a Barnabas Patient Voices member, there is a contract between you and Barnabas Patient Voices. Consequent upon this Barnabas Patient Voices is permitted to hold your details for the duration and execution of the contract.
9. Use of Cookies
The barnabasvoices.org.uk website uses cookies; if you use the site, you are using cookies. Cookies are small files which are stored on the computer you are using to access the website. Cookies are used so that your session on the website may be smooth and continuous; they are used to store (for example) selections you have made, options you have selected, and the data you have entered on a form.
This site may not work correctly if you have cookies disabled, although we believe it will.
We believe our use of cookies is innocuous; we do not use them to extract detailed tracking information, or display advertisements on the site; neither do we share them with third parties.
Third party sites referred to by us may use cookies for similar purposes to ours, but we have no control over this.
10. Contacting Us
We welcome any queries, comments or requests you may have regarding this policy. Please do not hesitate to email chairman@barnabasvoices.org.uk or write to Chairman, Barnabas Patient Voices, c/o Barnabas Medical Centre.
11. Specific Suppliers with Whom We Share Data
We are required by the GDPR regulations to state the suppliers with whom we may share data. Currently these are:
- our parent body, Barnabas Medical Centre, Girton Road, Northolt, UB5 4SR; www.barnabasmedicalcentre.co.uk.
For the purposes of (a) security/backup and (b) validation of registered patient (or carer) status of members.