Introduction

This website privacy policy explains how we use any personal data collected through our website in compliance with UK GDPR.

Data Collected

We may collect contact details via forms, cookies, and analytics data.

Data is used to respond to enquiries and improve services.

Our website may use cookies to enhance user experience.

You have rights to access, correct, or request deletion of your data.

Data Protection Audit Standards

Overview

This document outlines audit standards to ensure compliance with UK GDPR and CQC requirements.

Governance

Named Data Protection Lead, documented policies, and regular reviews.

Training

All staff must complete annual GDPR training.

Records

Maintain accurate, up-to-date patient records securely.

Security

Use encryption, password protection, and secure storage.

Breach Management

Document and report breaches within 72 hours.

Patient Rights

Ensure processes for SARs and consent are in place.

Audit Trail

Maintain logs of access, changes, and incidents.