Privacy Policy

Who we are

This privacy notice explains how personal information is handled when you use the Mr Daniel Dowen website, contact the private practice or arrange private orthopaedic care.

Mr Daniel Dowen is a Consultant Orthopaedic Hip and Knee Surgeon. Private consultations are currently arranged through his practice at Spire Washington Hospital, Picktree Lane, Washington, Tyne and Wear, NE38 9JZ.

Information we may collect

The information we collect depends on how you interact with the practice. It may include:

• your name, date of birth and contact details;
• appointment and referral information;
• information you submit through website forms, email or telephone;
• insurance and billing information;
• medical history, symptoms, diagnoses, medication, allergies and treatment information;
• clinical correspondence, investigation results, imaging and operation information;
• technical information associated with use of the website, such as IP address, browser or device information where collected by website systems;
• records needed to respond to enquiries, manage appointments and provide healthcare.

Medical information is special category personal data and is handled with additional protection under UK data protection law.

How we use your information

Personal information may be used to:

• respond to enquiries and arrange consultations;
• assess, diagnose and provide medical care;
• communicate with you, your GP, referrer or other healthcare professionals involved in your care;
• manage private medical insurance, billing and administration;
• meet professional, regulatory, legal and clinical record-keeping obligations;
• protect the security and proper operation of the website and practice systems;
• improve website performance and understand website use where permitted.

Lawful bases for processing

We only process personal information where there is a lawful basis to do so. Depending on the circumstances, this may include performance of a contract or taking steps at your request before entering into one, compliance with a legal obligation, legitimate interests, protection of vital interests, or consent where consent is the appropriate basis.

For health information and other special category data, processing may also be necessary for medical diagnosis, the provision or management of healthcare, or another condition permitted by UK GDPR and the Data Protection Act 2018.

Who we may share information with

Where appropriate and lawful, information may be shared with organisations or professionals involved in your care or administration, including:

• hospitals and clinic providers;
• your GP, referrer and other healthcare professionals;
• laboratories, radiology and diagnostic providers;
• private medical insurers and billing organisations;
• secretarial, IT, website, hosting and professional service providers acting under appropriate obligations;
• regulators, courts, public authorities or law enforcement where disclosure is legally required.

We do not sell personal information to third parties.

How long we keep information

Information is kept only for as long as necessary for the purpose for which it was collected and to meet clinical, legal, professional, insurance and regulatory requirements.

Clinical records may need to be retained for longer periods than ordinary website enquiries. Retention can therefore vary depending on the nature of the information and the care provided.

Your data protection rights

Depending on the circumstances, you may have rights to request access to your personal information, rectification, erasure, restriction of processing, objection to processing and data portability. Where processing is based on consent, you can withdraw consent at any time without affecting processing that took place before withdrawal.

Some rights are subject to legal exemptions, particularly where information forms part of a clinical record that must be retained.

Security and international transfers

Reasonable technical and organisational measures are used to protect personal information from unauthorised access, loss, misuse or disclosure.

Some technology providers may process information outside the UK. Where this occurs, appropriate safeguards are used where required by data protection law.

Contact and complaints

If you have a question about how your personal information is used, contact the practice in the first instance.

You also have the right to complain to the Information Commissioner's Office if you remain concerned about the handling of your personal information.