Privacy Policy
Hilltop Vets
Privacy Policy for Pet Owners
What data we collect and store:
- Your contact details (name, postal address, email, and phone numbers)
- The medical history of your pet(s) – this is not covered by GDPR
- Financial information about the transactions you have had with us including any payment issues
- Insurance policy details, claims and financial transactions
- Information that may affect how we communicate with you (such as if you have a hearing or visual impairment or difficulties with memory retention)* with your express consent
- Health information about you, limited to information without which you could be exposed to a risk to your health during the normal course of treating your pet (such as a penicillin allergy, immunosuppression or pregnancy)* with your express consent
- Feedback you give the practice
- Information regarding your interactions with staff, if deemed necessary to protect staff health and safety
- CCTV images from areas with CCTV notification signs
How we obtain your data:
- Online registration via encrypted website form
- Information you supply to us in person at the surgery
- Information you supply to us by telephone, email and social media messages, or if you chose to complete one of our surveys
- If you download or use any of our Apps, including WhatsApp
- Clinical records from other veterinary surgeries as a result of you requesting the transfer of your pet’s care to us
- Insurance companies may provide information about you/your pet to us but should obtain your permission before doing so, we will use this information to help process claims/pre-authorisations
- When you call the practice, our calls are recorded for training and security purposes
How your data is stored:
Computerised records are stored on our password protected secure server. Authorised staff can access this data on- and off-site and are subject to timed log-outs. The majority of paper records, such as consent forms, are scanned onto the computer system within one week and subsequently destroyed. Paper records, where there is a legal requirement for these to be retained, for example Export Certificates, are filed in a locked cabinet in a secure room.
How we use your data:
- To facilitate the provision of medical care for your pet within our clinic
- To keep a record of financial transactions you have had with us
- To administrate our Pet Health Plans
- To contact you for other reasons, given below
- Stored CCTV images are accessed only for crime prevention/investigation purposes
When we will communicate with you and your choices.
Reminders and essential communication
- General administration of your pet’s healthcare (such as informing you about test results, medication ready to collect, appointment times)**
- Routine health care reminders (booster vaccinations, medication/parasite control)
- Information regarding how to access our services and any changes that may occur
- Feedback surveys, with no promotional content
- Invoicing and debt control
- If there is a data breach that would put you at risk
Additional marketing communication
- Relevant healthcare promotions (such as firework phobias during November) and other offers beneficial to your pet’s health and wellbeing.
- Newsletters and links to blogs
- Events (such as talks and Open Days)
We will confirm your preferences for communication at the time of registration and again on a regular basis when contact details are updated (minimum every 3 years)
You can ask for us to update your communication preferences at any time by contacting us in writing, by telephone or in person. We will action this within 10 working days.
**We are unable to provide care for your pet if you do not agree to us contacting you for these purposes as these are required in order to fulfil our contractual obligations
When we will share your data with third parties:
- For medical continuity for your pet when attending other veterinary surgeries including emergency service providers, referral hospitals and other general practice clinics
- Insurance claim processing
- Microchip registration
- Government departments involved in the movement of animals into and out of the UK
- External laboratories, radiologists etc. to process medical samples/images from your pet
- Crematorium service when individual cremation has been arranged
- Our IT support have access to our server on which your data is stored
- Communication partners who help us communicate with you about our services
- Our legal advisors/insurers in the event of any dispute/potential dispute
- Debt management agencies in the event of default
- The Kennel Club will be informed of caesarian sections and conformation-altering procedures
- Relevant bodies in the case of genetic testing, such as hip and eye scores, will be provided with breeder details and the Kennel Club make results of such testing available to the public
- Drug reaction and disease surveillance purposes
- To uphold the law, animal welfare and the wider public interest including, but not limited to, law enforcement, Trading Standards, the Veterinary Medicines Directorate and the RSPCA
Third parties we share data with only with your express permission:
- As introducers for Vetsure Insurance
- On our social media pages (limited to photos and names)
How long do we keep your records?
We will retain all your data for a minimum of 7 years from the date we last provided medical care to any of your pets in order to protect the legitimate interest of the business. After 8 years of inactivity all records will be destroyed.
Requests for data:
You can request to see the data we hold on you and your pet at any time by contacting us in writing (including email) at the address below. We will respond within one month.
Requests for amendments/change in preferences:
You can ask for us to amend your records at any time (for example a change of address or to correct a misspelling) or request to stop receiving healthcare reminders, newsletters/blog updates and information about events/promotions/offers by contacting us in writing, by telephone or in person at any time. We will action this within 10 working days.
Requests for removal from database:
You can request the removal of any sensitive data (pertaining to your own health as above*) at any time. Requests for deletion of these records from our files must be in writing (including email) to the address below and will be actioned within one month. Contact details, clinical and financial records will not be removed until seven years after they were created in order to protect the legitimate interests of the business.
Complaints
If you do not feel we have handled your data or preferences correctly please contact the surgery in the first instance and we will do our best to rectify the situation. If the problem is still not resolved you can contact the Information Commissioner’s Office (ICO).
Changes to this policy
We’ll amend the Policy from time to time to ensure it remains up-to-date and accurately reflects how and why we use your personal data. Changes and clarifications will take effect immediately upon their posting on the website. The current version of our Policy will always be posted on our website.
This Policy was last updated on 13th October 2023
Our contact details
Hilltop Veterinary Centre
The Barn
Hinksey Heights
Oxford
OX1 5AB
info@hilltopvets.co.uk
01865 736060