Privacy Policy

Home / Privacy Policy

Introduction

Dr. Naveen Mudalagiri is a Consultant Cardiologist and Interventional Cardiologist dedicated to providing expert cardiac care. This privacy policy explains how Dr. Mudalagiri collects, uses, and protects the personal data of his patients in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Dr. Mudalagiri is committed to ensuring that your privacy is protected. Should he ask you to provide certain information by which you can be identified when using his services or this website, you can be assured that it will only be used in accordance with this privacy statement.

Data Controller

For the purpose of the UK GDPR, the data controller is Dr. Naveen Mudalagiri. All queries regarding data protection should be directed to his practice.

What Information is Collected

Dr. Mudalagiri may collect the following information:

Personal Identification Information: Name, date of birth, and contact information including email address, postal address, and telephone number.
Medical and Health Information: Details about your current and past health, medical history, treatments, and medications. This is considered “special category data” under UK GDPR.
Referral Information: Information from your referring GP or other healthcare professionals.
Financial Information: Details related to payment for services, including insurance information.
Website Usage Information: Information collected via cookies, such as your IP address and browsing activity on the website.

How Your Information is Used

Your information is required to understand your needs and provide you with the best possible medical care. Specifically, your data is used for:

Providing and managing your healthcare, including diagnosis, treatment, and ongoing care.
Internal record keeping and clinical audit.
Communicating with you about your appointments and care.
Liaising with other healthcare professionals involved in your care, such as your GP.
Processing payments and managing accounts.
Complying with legal and regulatory obligations.

Legal Basis for Processing Your Data

Dr. Mudalagiri processes your personal data on the following legal bases:

Health Data (Special Category Data): The processing of your health data is necessary for the purposes of medical diagnosis and the provision of healthcare or treatment.
Contract: Processing your data is necessary for the performance of a contract to which you are a party (i.e., to provide you with healthcare services).
Legal Obligation: Processing is necessary for compliance with a legal obligation, such as maintaining medical records in line with the NHS Records Management Code of Practice.

Data Sharing and Confidentiality

Your information is treated with the utmost confidentiality. It will not be shared with third parties without your explicit consent, except in the following circumstances:

With other healthcare professionals directly involved in your care.
With your GP to ensure continuity of care.
With your insurance provider for the purpose of processing claims.
When required by law or by a court order.

Dr. Mudalagiri will never sell your personal information to third parties.

Data Retention

Your personal and medical records will be retained in accordance with the retention periods specified by the NHS Records Management Code of Practice and other applicable laws. In general, adult health records are kept for a minimum of 8 years after the conclusion of treatment.

Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

The right to be informed: You have the right to be informed about the collection and use of your personal data.
The right of access: You have the right to access your personal data and supplementary information.
The right to rectification: You have the right to have inaccurate personal data rectified, or completed if it is incomplete.
The right to erasure: You have the right to have personal data erased. This is also known as the ‘right to be forgotten’.
The right to restrict processing: You have the right to request the restriction or suppression of your personal data.
The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
The right to object: You have the right to object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact Dr. Mudalagiri’s practice.

Data Security

Dr. Mudalagiri is committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, he has put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information he collects.

Cookies Policy

This website may use cookies to enhance your browsing experience. A cookie is a small file which asks permission to be placed on your computer’s hard drive. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.

Contact Information

If you have any questions about this privacy policy or how your data is handled, please contact Dr. Mudalagiri’s practice. Contact details can be found on the website: https://cardiologycare.uk/ ( Add new website link)

Complaints

If you are not satisfied with how your data is being handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent body set up to uphold information rights.You can contact the ICO at:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk/