Privacy Notice

  1. Diagnostic and Rehab Services Ltd (DRS), is based at Key House, 7 Christie Way, Manchester M21 7QY and supplies medical imaging services and rehabilitation services.
  2. You have received this notice as you are either a client, patient, or have had a previous association with our company. If you would like to have your contact details removed from our mailing list, please contact our office on 0161 434 5700.
  3. This privacy notice provides information about the personal information we process, in compliance with the General Data Protection Regulation (GDPR).
  1. 4.Our ICO registration number is Z3192548
  1. Please contact Jennifer Foulkes at jen@legal-drs.co.uk with any questions or requests about the personal information we process.

Your rights

  1. We are committed to protecting your rights to privacy. They include:
  • Right to be informed about what we do with your personal data;
  • Right to have a copy of all the personal information we process about you;
  • Right to rectification of any inaccurate data we process, and to add to the information we hold about you if it is incomplete;
  • Right to be forgotten and your personal data destroyed;
  • Right to restrict the processing of your personal data;
  • Right to object to the processing we carry out based on our legitimate interest;

The personal data we process, why we process it, where it comes from and the legal basis for doing so

  1. We process the personal data of individuals who are obtaining legal advice or are engaged in a legal dispute.  We also process personal data of private patients who either self-refer or are referred to us by a medical or para-medical practitioners.
  1. The personal data may include: 
  • Names, contact details and dates of birth;
  • Financial information and bank details;
  • Health information;
  • Information about race, ethnic origin and sex;
  1. The personal data are generally provided by the person instructing us. In relation to the legal issues, this is usually a solicitor.
  1. We process the data because it is in our legitimate interests as the selected medical imaging and rehabilitation provider to do so. We need to see and analyse documents containing the information in order to provide our services.
  1. In relation to any special category personal data, such as health records or information concerning, race, ethnic origin, or sex, we rely on the legal claims basis for processing this data, in addition to our legitimate interest.
  1. In many cases, an individual has consented to the transfer of their personal data to us. Where an individual has consented, he or she may easily withdraw it by notifying our office.

Other personal data

  1. We also process personal data pursuant to our legitimate interests in running our business such as:
  • Invoices and receipts;
  • Accounts, VAT and tax returns;
  • Insurance policies and related documents;
  1. As an employer, we process personal data further to contracts of employment with our employees. The information includes:
  • Names, addresses and contact details;
  • Pay and bank details, pay slips;
  • Curricula vitae, contracts of employment, references and appraisals;
  • Health information ( in reliance on the occupational health exemption contained in the Data Protection Act 2018)

13. Finally, we run a secure password protected client relationship management system. Any personal data on the system is held in accordance with the consent of the data subject, obtained by the instructing party or directly by ourselves. This can be withdrawn at any time by contacting the companyabove.

Retention period

14. Personal data in legal cases is retained by ourselves, where necessary, in compliance with our professional indemnity obligations.  Private non-legal referral data is not stored beyond the conclusion of the investigations. This information is passed on to the patient and data held destroyed. The exception to this is the fiscal record pertaining to the instructions. 

15. Administrative data is retained for up to 7 years as necessary, in the unlikely event there are queries from HMRC and the VAT commissioner. Where it is not necessary to retain the data for six years, it is destroyed as soon as possible.

16. Personal data relating to employees who have left our employment is also retained for up to 7 years as necessary, (for example if there is breach of contract claim).

Whom do we share personal data with?

17. We share personal data internally strictly on a need to know basis.

18. Special category data and personnel files held electronically are encrypted with restricted access. Hard copy special category and other personal data is stored securely with restricted access.

19. We do not share personal data with anyone external to the organisation, other than with:

  • Those who have instructed us to arrange medical imaging/diagnostics/rehabilitation, whereupon we will provide them with the reports derived from such appointments.
  • Outsourced service providers such as hospitals, private medical consultants, rehabilitation providers such as physiotherapists, and psychologists and other therapy providers, pursuant to GDPR compliant written contracts
  • HMRC and the VAT Commissioner as they require
  • With others pursuant to a court order
  • Public Liability Insurers 

Information Commissioner’ s Office

20. If you have any concerns about the way your personal information has been processed, please contact DRS Ltd by email to info@legal-drs.co.uk. Alternatively, you may contact the Information Commissioner’ s Office on 0303 123 1113.