Data Policy

Who We Are

We are a specialist provider of Bio Medical services and systems to healthcare professionals, advisors, and patients. Our services use Blood Drop and www.blooddrop.co.uk as a tool to assist in improving health conditions and wellbeing. This agreement and the service provided under the agreement apply to UK data protection legislation. All applicable data protection and privacy legislation in force from time to time in the UK, including the General Data Protection Regulation (EU 2016/679), the Data Protection Act 2018, the Privacy Electronic Communications Directive (2002/58EC as updated by Directive 2009/136/EC), and the previous year's Electronic Communications Regulations (SI 2003/2426) as amended.
Bio Healthcare Networks Ltd / Blood Drop and www.blooddrop.co.uk
Broadgate Tower, 12th Floor, 20 Primrose St, London EC2A 2EW

Contact Details of Data Protection Officer

If you have any questions or concerns regarding the information we hold on you, the use of your information, or would like to discuss further, please contact:
Mrs. Krishna Patel
Email: kp@biohealthcarenetworks.com

Why We Collect Information (Purpose of Processing)

The processing of data and this privacy notice relates to all patient information processed within Blood Drop and Blood Testing Clinics.

• To support the delivery of appropriate care and treatment to all customers and patients
• Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract
• Processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of healthcare advisors, resellers, employees, medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to a contract with a health professional and subject to the conditions and safeguards.
• To inform our patients of our offers, promotions, educational information, events, and healthcare event days
• The data subject has given consent to the processing of his or her personal data for one or more specific purposes
• Referrals from/to third-party healthcare professionals or advisors to provide services, clinical testing, specialist care, and treatment for their patients

How We Collect Information

We may ask for or hold personal confidential information about you, which will be used to support the delivery of appropriate care and treatment. This is to support the provision of high-quality care, support, and services.

These records may include:

• Basic details, such as name, address, date of birth
• Contact we have had, such as appointments and home visits.
• Details and records of treatment and care, including notes and reports about your health
• Results of lab work for blood tests, etc.
• Information from people who care for you and know you well, such as health professionals and relatives.
• It may also include personal sensitive information such as sexuality, race, your religion or beliefs, and whether you have a disability, allergies, or health conditions. It is important for us to have a complete picture, as this information assists staff involved in your care to deliver and provide improved care, deliver appropriate treatment and care plans, and meet your needs.

Information is collected in a number of ways, via your new patient registration form, your consultant, referral details from your GP or other healthcare professional, or directly given by you.

How We Use Information

• To help inform decisions that we make about your care.
• To ensure that your treatment is safe and effective.
• To work effectively with other organizations who may be involved in your care.
• To ensure our services can meet future needs.
• To review the care provided to ensure it is of the highest standard possible.
• To train healthcare professionals.
• For research and audit.

Accurate and up-to-date information assists us in providing you with the best possible care. Where possible, when using information to inform future services and provision, non-identifiable information will be used.

Recipients of Personal Data

To provide the best care possible, sometimes we will need to share information about you with others. We may share your information with a range of Health and Social Care organizations and regulatory bodies. You may be contacted by any one of these organizations for a specific reason, and they will have a duty to tell you why they have contacted you. Information sharing is governed by specific rules and law.

Lab Work: During your care, we may also need to share information about you with third parties to process your test results. These test results are processed by our authorized and accredited laboratories that are based in the United Kingdom or the United States.

Insurance Companies: During your care, we may need to share information with insurance companies where insurance plans are used to cover the costs of the care and treatment you as a patient are receiving. The data shared will be in the form of claims relating to the treatment received so that appropriate payment can be made. The insurers that receive this information will be highlighted to Biohealthcare Networks / Blood Drop by the patient during registration.

Referral: During your treatment, you may be referred by your team member to a parent, resellers, GP, or current healthcare professional for a referral for part of your treatment. We will always notify you before a referral is completed.

Details of Transfers to Third Countries

Test information from patients is sometimes sent to our authorized and accredited laboratories based in the EU and US, and they, therefore, process and store some test data of our patients on behalf of Blood Drop and www.blooddrop.co.uk to enable test results to be produced.

Retention Period of Your Data

Bio Healthcare Networks T/A Blood Drop retention periods for the storage of patient information will adhere to the NHS Records Management code of practice.
You can view our Retention Schedule [here](link to your Retention Schedule).
You can request a copy of the document Retention policy - Rights given under Data Protection.

How to Exercise Your Rights

The Right to Be Informed: Read this Privacy policy about how we use your information.
The Right of Access: Contact our Data Protection Officer, and we shall respond to you within 30 calendar days of receipt of proper identification.
The Right to Rectification: Contact our Data Protection Officer with any inaccuracies or queries.
The Right to Restrict Processing: Contact our Data Protection Officer.
The Right to Object: This is detailed when you give your consent to receive information regarding our events on the new patient registration form and on the website. Contact our Data Protection Officer with any queries.
Right to Withdraw Consent: You can withdraw your consent to receive information about our events and insights day calendar at any time by using the unsubscribe link contained in all relevant communications or by contacting our Data Protection Officer.
You also have the right to refuse/withdraw consent to information sharing at any time. We will fully explain the possible consequences to you at such a time as withdrawing consent could include delays in your receiving care.

Your Right to Complain

We try to meet the highest standards when collecting and using personal information. We encourage people to bring concerns to our attention, and we take any complaints we receive very seriously. You can submit a complaint at any time by contacting:

Mrs. Krishna Patel – kp@biohealthcarenetworks.com
You always have the right to complain to our supervisory authority. We are based in the UK, and our Supervisory Authority is the UK Information Commissioner's Office, and more information can be found here or you can write to the ICO at the address below:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF