Our contact details

Name: Andrew Syme

Address: Aurora House, Deltic Avenue, Rooksley, Milton Keynes, Buckinghamshire, United Kingdom, MK13 8LW

Phone Number: 03303356428

E-mail: dpo@ishealth.co.uk

NHS Care Identity Authentication (CIA)

Please note that if you access our service using your NHS Care Identity credentials, the identity access and management services are managed by NHS England. NHS England is the controller for any personal information you provided to NHS England to get a national digital identity and authenticate your claim to that identity, and uses that personal information solely for that single purpose. For any personal information, our role is a “processor” only and we must act under the instructions provided by NHS England (as the “controller”) when verifying your identity. To see NHS England’s Privacy Notice and Terms and Conditions, view the NHS Care Identity Service 2 page. This restriction does not apply to the personal information you provide to us separately which is managed in accordance with our Privacy Policy.

The type of personal information we collect

We currently collect and process the following information:

Skyline Users

• Name

• Email address

• Skyline Role

Patients

• Demographic and clinical data; which is a copy of the data held in the GP Clinical System.

How we get the personal information and why we have it

Skyline Users

All the personal information we process is provided to us directly by you, or your practice, for the registration of your account on Skyline.

We use the information that you have given us in order to manage and verify your access to Skyline.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is Your consent. You are able to remove your consent at any time. You can do this by contacting support@ishealth.co.uk. Removal of this consent will revoke all access to Skyline.

Patients

We receive personal information indirectly, from the GP Clinical System by way of the NHS Digital Approved IM1 transfer mechanism which has been enabled by Practice staff, on behalf of the Practice Data Controller.

We do not edit or modify this data. We receive an update of the data we hold every day from the GP Clinical System

We use the information that you have given us in order to provide one or more of Clinical Decision Support, Risk Stratification and Population Health Management capabilities that help GPs.

We do not share this information without the direct consent of the Data Controller at your GP Practice. Where data is shared it may be shared with one or more of:

• Other GP Practices.

• Public Health Bodies.

• Primary Care Networks, Clinical Commissioning Groups or other associated NHS bodies.

• Bodies with appropriate National Health Service Act 2006 Section 251 approvals.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is the consent of the Data Controller for the provision of direct patient Care.

How we store your personal information

Your information is securely stored within the UK.

Skyline Users

We keep your Name and contact details for the duration of your use of Skyline. We will then dispose of your information by securely deleting the record.

We also record Audit data, which may include personal information, and which we hold in line with the legal requirements. This data may be retained after we delete other data.

Patients

We keep demographic and clinical records for the duration of your GP Practice's use of Skyline. We will then dispose of your information by securely deleting the records.

Your data protection rights

Under data protection law, you have rights as detailed below.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at the email, phone and address above if you wish to make a request.

Your right of access

Skyline Users

You have the right to ask us for copies of your personal information.

Patients

We only hold a copy of the data held on the GP Clinical System so all access requests should be sent to your local GP surgery.

Your right to rectification

Skyline Users

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This should be done by contacting support@ishealth.co.uk.

Patients

You have the right to ask your GP to rectify personal information you think is inaccurate. We do not have the ability to edit data received from the GP Clinical System, but our data is updated every day from the GP Clinical System.

Your right to erasure

Skyline Users

You have the right to ask us to erase your personal information in certain circumstances. Erasure of this data will revoke all access to Skyline. This should be done by contacting support@ishealth.co.uk.

Patients

You have the right to ask your GP to erase your personal information in certain circumstances. Our data is updated every day from the GP Clinical System and when we receive notification of a patient record being removed from the GP Clinical System the record is automatically deleted from our system; this process also occurs when a patient leaves a practice.

Your right to restriction of processing

Skyline Users

You have the right to ask us to restrict the processing of your personal information in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.

Patients

You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing

Skyline Users

You have the the right to object to the processing of your personal information in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.

Patients

You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability

Skyline Users

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. This may result in revoking all access to Skyline. This should be done by contacting support@ishealth.co.uk.

Patients

You have the right to ask that your GP transfer the personal information they hold, and your GP practice provided to us, to another organisation, or to you, in certain circumstances. Our data is updated every day from the GP Clinical System and when we receive notification of a patient record being removed from the GP Clinical System the record is automatically deleted from our system.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at dpo@ishealth.co.uk.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Helpline number: 0303 123 1113

ICO website: https://ico.org.uk/