Privacy Notice for Skyline Users |
Name: Andrew Syme
Address: Aurora House, Deltic Avenue, Rooksley, Milton Keynes, Buckinghamshire, United Kingdom, MK13 8LW
Phone Number: 03303356428
E-mail: dpo@ishealth.co.uk
Please note that if you access our service using your NHS Care Identity credentials, the identity access and management services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get a national digital identity and authenticate your claim to that identity, and uses that personal information solely for that single purpose. For any personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS England’s Privacy Notice and Terms and Conditions, view the NHS Care Identity Service 2 page. This restriction does not apply to the personal information you provide to us separately which is managed in accordance with our Privacy Policy.
We currently collect and process the following information:
Name
Email address
Skyline Role
Demographic and clinical data; which is a copy of the data held in the GP Clinical System.
All the personal information we process is provided to us directly by you, or your practice, for the registration of your account on Skyline.
We use the information that you have given us in order to manage and verify your access to Skyline.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is Your consent. You are able to remove your consent at any time. You can do this by contacting support@ishealth.co.uk. Removal of this consent will revoke all access to Skyline.
We receive personal information indirectly, from the GP Clinical System by way of the NHS Digital Approved IM1 transfer mechanism which has been enabled by Practice staff, on behalf of the Practice Data Controller.
We do not edit or modify this data. We receive an update of the data we hold every day from the GP Clinical System
We use the information that you have given us in order to provide one or more of Clinical Decision Support, Risk Stratification and Population Health Management capabilities that help GPs.
We do not share this information without the direct consent of the Data Controller at your GP Practice. Where data is shared it may be shared with one or more of:
Other GP Practices.
Public Health Bodies.
Primary Care Networks, Clinical Commissioning Groups or other associated NHS bodies.
Bodies with appropriate National Health Service Act 2006 Section 251 approvals.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is the consent of the Data Controller for the provision of direct patient Care.
Skyline provides Clinical Decision Support, Risk Stratification and Population Health Management capabilities that help GP practices to:
|
Your information is securely stored within the UK.
We keep your Name and contact details for the duration of your use of Skyline. We will then dispose of your information by securely deleting the record.
We also record Audit data, which may include personal information, and which we hold in line with the legal requirements. This data may be retained after we delete other data.
We keep demographic and clinical records for the duration of your GP Practice's use of Skyline. We will then dispose of your information by securely deleting the records.
Under data protection law, you have rights as detailed below.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at the email, phone and address above if you wish to make a request.
You have the right to ask us for copies of your personal information.
We only hold a copy of the data held on the GP Clinical System so all access requests should be sent to your local GP surgery.
You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This should be done by contacting support@ishealth.co.uk.
You have the right to ask your GP to rectify personal information you think is inaccurate. We do not have the ability to edit data received from the GP Clinical System, but our data is updated every day from the GP Clinical System.
You have the right to ask us to erase your personal information in certain circumstances. Erasure of this data will revoke all access to Skyline. This should be done by contacting support@ishealth.co.uk.
You have the right to ask your GP to erase your personal information in certain circumstances. Our data is updated every day from the GP Clinical System and when we receive notification of a patient record being removed from the GP Clinical System the record is automatically deleted from our system; this process also occurs when a patient leaves a practice.
You have the right to ask us to restrict the processing of your personal information in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.
You have the right to ask us to restrict the processing of your personal information in certain circumstances.
You have the the right to object to the processing of your personal information in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.
You have the the right to object to the processing of your personal information in certain circumstances.
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.
You have the right to ask that your GP transfer the personal information they hold, and your GP practice provided to us, to another organisation, or to you, in certain circumstances. Our data is updated every day from the GP Clinical System and when we receive notification of a patient record being removed from the GP Clinical System the record is automatically deleted from our system.
If you have any concerns about our use of your personal information, you can make a complaint to us at dpo@ishealth.co.uk.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://ico.org.uk/