Privacy policy

INTRODUCTION

This Privacy Notice outlines how Quaba Plastic Surgery collects, uses, and protects your personal information. Please take the time to read this notice carefully to understand our practices regarding your data.

ABOUT US

We are Quaba Plastic Surgery, a medical practice providing services primarily at the Waterfront Private Hospital in Edinburgh, with additional procedures carried out at Spire Shawfair Park Edinburgh and Kings Park Hospital Stirling. If you have any questions, concerns, or comments about how we handle your personal information, please contact us at:

Address: Waterfront Private Hospital, 1 Waterfront Park, Edinburgh, EH5 1SD
Phone: 0131 346 3785
Email: [email protected]

YOUR PERSONAL DATA

We are responsible for managing the personal information we hold about you. This includes details related to your medical treatment, as well as other information such as financial data for billing purposes. We must comply with UK data protection legislation, including the Data Protection Act 2018, and relevant guidance when handling your personal information. Any images taken in relation to your treatment will also be managed according to applicable professional standards, such as those from the General Medical Council and British Medical Association.

Where We Provide Your Treatment

Your treatment is primarily conducted at the Waterfront Private Hospital. We also perform certain procedures at Spire Shawfair Park Edinburgh and Kings Park Hospital Stirling. These hospitals may also process your personal data as part of their role in your treatment. They will do so according to the law, the principles set out in this Privacy Notice, and their own privacy policies, which will be provided to you.

WHAT PERSONAL INFORMATION WE COLLECT

We may collect and use the following types of personal information:

• Contact Information: Name, postal address, email address, telephone numbers (including mobile number).
• Financial Information: Payment details such as credit card information and insurance policy details.
• Emergency Contact Details: Information about your next of kin or other emergency contacts.
• Medical Information: This includes details about your current or past physical and mental health, information on any healthcare you have received from other providers (both NHS and private), details of clinic and hospital visits, treatments, and prescribed medications. We may also hold special categories of personal data, such as details of your race, ethnicity, religion, genetic or biometric data, sex life, or sexual orientation.

HOW WE USE YOUR PERSONAL INFORMATION

We use your personal information for several important purposes:

• Providing Healthcare Services: To manage and deliver your medical treatment, including consultations, surgeries, and aftercare.
• Communication: To keep you informed about your care, appointments, and any necessary follow-up actions.
• Billing and Payments: To process payments, manage your account, and handle insurance claims.
• Legal and Regulatory Compliance: To fulfill our legal obligations and comply with regulatory requirements, including those from healthcare regulators.

We may share your information with other healthcare professionals involved in your care, such as other doctors, nurses, or administrative staff, but only when necessary to provide the best possible treatment.

HOW WE COMMUNICATE WITH YOU

We may contact you through various methods, including telephone, SMS, email, or post. If we contact you via phone and are unable to reach you, we may leave a voicemail message with basic details. We may use SMS and unencrypted email to send you appointment reminders and updates about your care. For more sensitive medical information, such as test results or clinical updates, we will use encrypted email where possible.

LEGAL GROUNDS FOR PROCESSING YOUR INFORMATION

We rely on several legal justifications for using your personal data, including:

• Contractual Necessity: Processing your data is necessary to fulfill our contract with you to provide healthcare services.
• Legitimate Interests: We may process your data for our legitimate business interests, provided this does not override your rights.
• Legal Obligations: We may process your data to comply with our legal obligations.
• Consent: In certain situations, we may rely on your consent to process your personal information, particularly for marketing purposes.

Failure to provide certain information necessary for the contractual provision of healthcare may mean that we are unable to offer you our services.

YOUR RIGHTS

Under data protection law, you have several rights concerning your personal information, including:

• Access: You have the right to request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct any inaccuracies or update incomplete information.
• Erasure: You have the right to request the deletion of your personal data in certain circumstances, such as if the information is no longer necessary for the purposes for which it was collected.
• Restriction of Processing: You can request that we limit how we use your personal data.
• Data Portability: In some circumstances, you can ask us to transfer your data to another organization.
• Objection to Processing: You have the right to object to how we use your data, particularly for direct marketing purposes.
• Withdrawal of Consent: Where we rely on your consent to process your data, you can withdraw it at any time.

To exercise any of these rights, please contact us at the details provided above.

DATA RETENTION

We will keep your personal information for as long as necessary to provide your healthcare and comply with legal and regulatory obligations. The specific retention periods depend on the type of data and the purpose for which it is used. If you have any questions about how long we retain your data, please contact us.

INTERNATIONAL DATA TRANSFERS

We do not currently transfer your personal data outside the European Economic Area (EEA). Should it become necessary to do so in the future, we will ensure that appropriate safeguards are in place to protect your information, and we will update this Privacy Notice accordingly.

DISCLOSURES TO THIRD PARTIES

We may disclose your personal information to the following third parties for the purposes described in this Privacy Notice:

• Healthcare professionals involved in your care, such as doctors, nurses, and administrative staff.
• Other private healthcare providers and NHS organizations.
• Insurance companies and other entities involved in processing payments.
• Government bodies, regulators, and law enforcement agencies when required by law.
• Service providers who assist with our business operations, such as IT suppliers, auditors, and legal advisers.

We may communicate with these third parties via various methods, including email, post, fax, and telephone.

MARKETING COMMUNICATIONS

With your consent, we may use your personal information to provide you with information about our services and products that may interest you. You can opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.

AUTOMATED DECISION-MAKING

We do not use automated decision-making processes that have legal or significant effects on you.

UPDATES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time to reflect changes in our practices or for legal reasons. The most current version will always be available on our website. If significant changes are made, we will notify you.

CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Notice or your personal data, please contact us at:

Quaba Plastic Surgery
Waterfront Private Hospital
1 Waterfront Park
Edinburgh, EH5 1SD
Tel: 0131 346 3785
Email: [email protected]