Background
This privacy notice sets out how we, at Advance Histopathology Limited (AH Lab), use and protect any personal information collected or generated in relation to you whilst using our website www.ahlab.co.uk.
We take your privacy seriously and have reviewed and updated our internal operational policies, processes and procedures to comply with the UK General Data Protection Regulation and UK Data Protection Act 2018 (“GDPR”, “regulations”).
What is collected, the lawful basis and the purpose of processing
The types of personal data collected when you use our website at www.ahlab.co.uk
- Data provided when using our Contact Us form
- Cookies – please see our Cookie policy or use our Cookie consent tool for more information
- Data provided in the Request Form
When using our Contact Us form, you consent to us processing the personal data provided in order to respond to your enquiry. We act as a Data Controller for this information.
When using our Request Form, you may be providing personal data about yourself or a third party and in addition, some of that personal data may be special category personal data. By completing and sending us the Request Form, you are responsible for ensuring that you have appropriate consent and authorisation from that third party for AH Labs to process that data.
The type of information that you may provide to AH Labs on the Contact Us or Request forms are:
- Contact data – name, email address, phone number, address
- Medical service requested
- Date of birth
- Medical conditions
Requesting a service
When you complete and send to AH Labs our Request Form, we will act under your instructions in order to process the request. We may require certain additional personal information in order to provide the requested medical services.
Data Retention
The retention period for data is determined by the purpose of the processing.
Contact Us form Data
This data is stored for as long as you may be a client or patient with AH Labs. If you contact us and do not become a client or patient, we will store your contact details for 18 months.
Request Form data
We may retain this data for up to six years after we perform a service for you.
Supplier Data
If you become a supplier to our practice, you are required to provide us with your contact information and payment details for the performance of our contract together. This data is stored for as long as you may be a supplier with us and for seven years thereafter for legal reasons.
Links to other websites
This site may contain select links to external sites from time to time. Care has been taken to ensure that any sites listed on our website are reputable and relevant to our medical services.
As you probably realise, once you use these links we do not have any control over how that external site may use your personal data, so we cannot be responsible for the protection and privacy of any information you provide whilst visiting those sites.
Please do exercise caution and look at the privacy notices applicable to external sites.
Recipients of your data
The results from requests may be sent to: the Consultant, Surgeon, Clinician or GP responsible for the patient’s treatment, the hospital (for medical records), the patient (if request received) as well as any hospital or clinic who originally request the data for the purpose of patient treatment or diagnosis.
Any analytical data collected via cookies is anonymised and used solely by AH Lab for internal analytical purposes. This information is not passed to any other party. You have the option to opt out of analytical data collected via cookies, by using our cookie consent tool.
We may share your data with third parties as part of a Company sale or restructure, or for other reasons to comply with a legal obligation upon us.
Automated decision making
No automated decisions are made using any personal information collected using this site.
Security
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we receive from you when using this website or emailing us on the contact details provided.
Data Transfers outside the UK or EEA
We do not send any Personally Identifiable data outside the EEA unless specifically requested by you.
Data Processor agreements
This applies to third party organisations we may use from time to time to manage this website or provide services to you.
We have ensured they have committed to implementing appropriate technical and organisational measures to meet their obligations under the Data Protection regulations.
Your rights
You are entitled to ask about the data that is held about you, subject to certain exceptions. This is called a Subject Access Request (SAR). These should be made by email or in writing to our Data Protection Manager at the following email addresses: [email protected].
In addition, the Data Protection regulation provides the following rights for individuals:
- The right to be informed
- The right of access
- The right to rectification
- The right to erasure
- The right to restrict processing
- The right to data portability
- The right to object
- Rights in relation to automated decision making and profiling
We make every attempt to ensure you are satisfied with the handling of your data queries or requests. However, you have the right to complain to the Information Commissioners Office (ICO) if you are not satisfied with the handling of your requests about the protection of your data. Follow the link below to report a concern to the ICO.
Last updated: August 2022