Privacy Notice for Clients

This privacy notice explains how I, as a self-employed phlebotomist, collect, use, and store your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Personal Data I Collect

I may collect and store the following information:

• Full name
• Date of birth
• Contact information (address, phone number, email)
• Medical history relevant to phlebotomy (e.g. allergies, blood disorders)
• Consent forms and treatment records

Why I Collect Your Data

Your data is collected for the following reasons:

• To provide safe and effective phlebotomy services
• To maintain treatment records and consent
• To contact you regarding appointments
• To comply with legal and insurance requirements

How Your Data Is Stored

• Paper records are kept in a locked, secure location.
• Only I have access to your personal information.

How Long I Keep Your Data

• Adult records are retained for 8 years after the last treatment.
• After this period, your records will be securely destroyed.

Who I Share Your Data With

Your information is treated confidentially and will not be shared without your consent, except where required by law or for insurance or referral purposes.

Your Rights

You have the right to:

• Access the personal data I hold about you
• Correct inaccurate information
• Request that your data be deleted (subject to legal limitations)
• Complain to the Information Commissioner’s Office (ICO)

Contact Information

If you have any questions or concerns about how your data is handled, please contact me directly.

You can also contact the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113