Privacy Policy

---

At Community Diagnostic Services (CDS), we are committed to ensuring that your privacy is protected and any information given to us by which you can be identified will only be used in accordance with this privacy policy. We comply fully with the data protection laws in force in the UK, including the UK GDPR, GDPR, and the Data Protection Act 2018 (“Data Protection Laws”), as well as all applicable clinical confidentiality guidelines.

This Privacy Policy explains how we collect, use, store, and disclose personal data that we collect from you and/or hold about you, and your rights in relation to that data. By providing your personal data to us or by using our services, you are accepting or consenting to the practices described in this Privacy Policy.

1. Who We Are

CDS provides diagnostic ultrasound services to patients referred by healthcare providers. Our registered address is 179 Birchfield Road, Birmingham, England, B19 1LL. For data protection queries, you can contact us at [Insert Contact Email or Phone Number].

For the purpose of Data Protection Laws, the data controller is Community Diagnostic Services (CDS).

2. What Information We Collect

We collect and process the following types of personal data:

• Personal Identification Data: Name, date of birth, NHS number, address, email, and phone number.
• Health Data: Clinical history, ultrasound images, referrals, and notes/reports related to your care.
• Administrative Data: Appointment details, correspondence with our staff, and payment details where applicable.
• Feedback: Patient satisfaction surveys and complaints where applicable.
• Technical Data (from website use): IP address, browser type and version, and other related online identifiers.
• Emergency Contact Data: The name and contact details of your next of kin or emergency contact (if provided by you).

The data we collect may include sensitive personal data relating to your health. By providing us with this data, you give us explicit consent to process it for the purposes set out in this Privacy Policy.

3. How We Use Your Information

We use your personal data to:

• Deliver diagnostic ultrasound services as requested by your healthcare provider.
• Communicate with you regarding appointments and test results.
• Ensure quality assurance and compliance with regulatory standards.
• Improve patient care and services through audits, feedback, and market research.
• Fulfill contractual and legal obligations.
• Respond to requests or complaints.

4. Lawful Basis for Processing

• We process your personal data under the following lawful bases:
• Legal Obligation: To comply with health regulations and standards.
• Contractual Obligation: To provide diagnostic services as part of your healthcare pathway.
• Consent: For optional services, such as participation in patient surveys.
• Public Interest: In the delivery of healthcare and ensuring public health.
• Legitimate Interest: For purposes such as internal record keeping and enhancing service quality.

5. How We Share Your Information

We may share your personal data with:

• Referring Healthcare Providers: To report diagnostic results.
• Regulatory Authorities: To meet compliance and audit requirements.
• Service Partners: Organizations that support the delivery of diagnostic services (e.g., IT providers, patient transport).
• Medical Professionals: External practitioners or consultants directly involved in your care.
• Third-Party Processors: Companies providing secure data storage, IT support, or billing services.

We will ensure that all third-party providers comply with Data Protection Laws and maintain confidentiality.

6. Data Retention

We retain your personal data in accordance with NHS guidelines and applicable laws. Diagnostic records are typically kept for 8 years after the date of service or longer where required by law.

7. Your Rights

Under GDPR, you have the right to:

• Access Your Data: Request a copy of your personal data.
• Rectify Errors: Correct inaccurate or incomplete information.
• Erase Data: Request deletion of your data, subject to legal constraints.
• Restrict Processing: Limit how your data is used.
• Data Portability: Request transfer of your data to another provider.
• Object: Decline certain uses of your data, such as for direct marketing.
• To exercise these rights, contact us at Privacy@communitydiagnosticservices.com or write to us at FAO: GDPR Officer, Community Diagnostic Services Limited, 179 Birchfield Road, Birmingham, England, B19 1LL.

8. Data Security

We implement strict security measures to protect your personal data, including:

• Encrypted data storage and transmission.
• Access controls to restrict unauthorized access.
• Regular audits and staff training on data protection.
• Physical, electronic, and managerial safeguards.

9. Cookies and Online Privacy

Our website may use cookies to improve user experience. Cookies allow web applications to respond to you as an individual. You can manage your cookie preferences through your browser settings.

10. Complaints

If you are dissatisfied with how we handle your personal data, you can lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: www.ico.org.uk 
• Phone: 0303 123 1113

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal compliance. The latest version will always be available on our website.

Contact Us

For questions about this Privacy Policy or your personal data, please contact us at:

Email:Privacy@communitydiagnosticservices.com

Address: FAO: GDPR Officer, Community Diagnostic Services Limited, 179 Birchfield Road, Birmingham, England, B19 1LL

Thank you for trusting CDS with your healthcare needs. Your privacy is our priority.