Who we are
Newmarket Equine Hospital (NEH), registered office address Newmarket Equine Hospital, Cambridge Road, Newmarket, Suffolk, CB8 0FG (Registered number: 04835644). For the purposes of the General Data Protection Regulation, the data controller is NEH.
This policy (together with our Terms and Conditions which can be found on our website www.newmarketequinehospital.com and any other documents referred to in them) sets out the basis on which personal date we collect from you, or that you provide to us, will be processed, used, stored and/or transferred by us.
Personal information we will collect from you
We will collect and process the following data about you:
Personal information you give us. You may give us information about you by filling in forms or by corresponding with us by phone, email, in person or otherwise. This includes data you provide when you enter details on our website (for example, via our ‘Enquire about an appointment’ or ‘Send us a message’ function), when you use our services, register with us, subscribe to our services or if you report a problem with our website. The data you give us may include your name, address, email address, telephone numbers, financial, credit card information and details about the animals owned by you or in your care, insurance details and other information so that we can provide the requested service to you.
Personal information we collect about you
With regard to each of your visits to our website we will automatically collect the following information:
Personal information we receive from other sources
This is information we receive about you from referring vets and other service providers. This information may include, but is not limited to, your name, address, email address and telephone numbers, financial and credit card information, names and details about the animals owned by you or in your care, insurance details and other information so that we can provide the requested service to you.
How we use the personal information collected
We use information held about you in the following ways:
Personal information you provide to us:
Personal information we collect about you
We will use this information:
Data we receive from other sources
We will sometimes combine the data we receive from other sources with the data you give to us. We will use this combined data for the purposes as outlined above.
Legal basis for processing your personal data
We will process your personal data in order to fulfil the contract between us and to enable us to provide the services that you have requested.
We may process your data after obtaining your consent to do so in order for us to send you marketing communications, inviting you to upcoming events and courses and keeping you informed of news and changes within the Practice.
When we rely on our legitimate interests in order to collect and process and use your personal data, we will give careful consideration to your rights and interests to ensure we do not infringe upon your fundamental rights and freedoms. We may continue only if we decide that your interests, rights and freedoms do not override our legitimate interests.
How long will we keep your personal data?
We will keep your personal data:
Disclosure of your information
You agree that we have the right to share your personal data with selected third parties including:
We may disclose your personal information to third parties:
Where we store your personal data
All information you provide to us is stored on our secure servers.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website. Any transmission is at your own risk.
Under the GDPR, you have the following rights:
The right of access
You have the right to obtain access to your personal data (commonly referred to as ‘subject access request’) free of charge. This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. However, if your request is manifestly unfounded or excessive we may charge a reasonable fee for the administrative costs. We will provide your data within one month of receipt of your request, unless the request is complex or multiple requests have been made. In this instance we will respond to you within one month advising why an extension is necessary.
The right to rectification
You have the right to have your personal data rectified if it is inaccurate or incomplete. We will respond to your request for rectification within one month of receipt. If we refuse to rectify your personal data, we will write to you to explain why.
The right to erasure
Also known as ‘the right to be forgotten’. This enables you to request the deletion or removal of your personal data. The right is not absolute and only applies in certain circumstances.
You have the right to have your personal data removed if:
If the processing of personal data is necessary for one of the following reasons, then the right to erasure does not apply:
The right to restrict processing
You have the right to restrict the processing of your personal data in the following circumstances:
The right to data portability
You have the right to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer your personal data easily from one IT environment to another in a safe and secure way, without affecting its usability. This right only applies to automated information.
The right to object to processing
You have the right to object to processing for direct marketing (which we do only with your consent) and also to processing which is carried out for the purposes of our legitimate interests.
The right to lodge a complaint
You have the right to lodge a complaint about the way we handle or process your personal date with the Information Commissioner’s Office.
The right to withdraw consent
If you have given your consent to anything we do with your personal data, you have the right to withdraw consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
If you withdraw your consent or fail to provide personal data we may not be able to provide certain services to you. We are happy to discuss any concerns you may have.