The website for Dr Spencer Ellis is www.hertfordshire-rheumatology-clinic.co.uk. We’re committed to protecting and respecting your privacy in compliance with the General Data Protection Regulation (GDPR).
Any questions regarding this Policy and our privacy practices should be sent via our website contact form to or by post to Kirsten Ellis, 20 Lodge Avenue, Elstree, Hertfordshire WD6 3ND. Alternatively, you can telephone 0208 207 2618.
WHO ARE WE?
Dr Spencer Ellis operates a private practise. He provides medical care services as a Consultant Rheumatologist and General Physician. He has been Clinical Director for Rheumatology, Dermatology and Neurology at East & North Herts NHS Trust for the past 10 years, as well as an examiner and host for the Royal College of Physicians’ PACES exam.
HOW DO WE COLLECT INFORMATION ABOUT YOU?
We obtain information about you when you use our website contact form, send us an email, call us on the telephone, send us information through the post, fill out a form in our practise or verbally give us information in our practise.
WHAT TYPE OF INFORMATION IS COLLECTED FROM YOU?
The personal information we collect on our website might include your name, address, email address, telephone number and other information that you consent to provide on our website contact form.
HOW ELSE YOUR INFORMATION MAY BE USED?
We may also use your information to:
to carry out our obligations arising from any contracts or agreements entered into by you and Dr Spencer Ellis
seek your feedback on the services we provide
notify you of relevant changes to our services
send you communications which you have requested and that may be of interest to you for legitimate business purposes
process an employment application
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. Dr Spencer Ellis will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with Dr Spencer Ellis.
WHO HAS ACCESS TO YOUR INFORMATION?
We will not sell or rent your information to third parties.
We will not share your information with third parties for marketing purposes.
Third Party Service Providers working on our behalf: We may pass your information to our third-party service providers, agents subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf. However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties beyond the Dr Spencer Ellis Network for them to use for their own direct marketing purposes, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us about Dr Spencer Ellis’s services, then you can select your choices by ticking the relevant boxes on our website contact form on which we collect your information.
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us via our website contact form or by telephone on 0208 207 2618.
Under the General Data Protection Regulation (GDPR), you have rights as an individual which you can exercise in relation to the information we hold about you.
The right to be informed
This encompasses our obligation to provide ‘fair processing information’, typically through a privacy notice that emphasises the transparency in our data processing methods and the reasons we may process your personal data with your consent.
The right of access
This allows individuals to be aware of and verify the lawfulness of the processing.
The right to rectification
This gives individuals the right to have personal data rectified if it is inaccurate or incomplete.
The right to erasure
Also known as ‘the right to be forgotten’ this enables an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
The right to restrict processing
This provides individuals with the right to ‘block’ or suppresses processing of personal data.
The right to data portability
This permits individuals to obtain and reuse their personal data for their own purposes across different services. It allows them to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without limiting usability.
The right to object
Individuals have the right to object to processing based on legitimate interests or the performance of a task in the public interest/exercise of official authority (including profiling); direct marketing (including profiling); and processing for purposes of scientific/historical research and statistics.
You can read more about these rights at
HOW YOU CAN ACCESS AND UPDATE YOUR INFORMATION?
Dr Spencer Ellis tries to be as open as he can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the General Data Protection Regulation (GDPR). If we do hold information about you, we will:
give you a description of it;
tell you why we are holding it;
tell you who it could be disclosed to; and
let you have a copy of the information in an intelligible form.
To make a request to Dr Spencer Ellis for any personal information we may hold, you need to put the request in writing addressing it to the address provided below.
We will try to deal with your request informally, for example by providing you with the specific information you need over the telephone if appropriate.
The accuracy of your information is important to us. If we do hold information about you, you can ask us to correct any mistakes by, once again, contacting us via our website contact form or write to us at Kirsten Ellis, 20 Lodge Avenue, Elstree, HERTFORDSHIRE WD6 3ND. Alternatively, you can telephone 0208 207 2618.
You also have the right to ask for a copy of the information Dr Spencer Ellis holds about you. Please notify us via our website contact form or write to us at Kirsten Ellis, 20 Lodge Avenue, Elstree, Hertfordshire WD6 3ND. Alternatively, you can telephone 0208 207 2618.
SECURITY PRECAUTIONS IN PLACE TO PROTECT THE LOSS, MISUSE OR ALTERATION OF YOUR INFORMATION
When you give us personal information, we take steps to ensure that it’s treated securely. Non-sensitive details (your email address etc.) are transmitted normally over the Internet, and this can never be guaranteed to be 100% secure. As a result, while we take great care to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
It is possible to switch off cookies by setting your browser preferences. For more information on how to switch off cookies on your computer, visit our full cookies policy. Turning cookies may result in a loss of functionality when using our website.
LINKS TO OTHER WEBSITES
16 OR UNDER?
Dr Spencer Ellis is dedicated to protecting the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian's permission beforehand whenever you provide us with personal information.
TRANSFERRING YOUR INFORMATION OUTSIDE OF EUROPE
As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy. Currently, our servers are located within the European Union and the United States (covered under the EU-U.S Privacy Shield Framework).
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
HOW TO CONTACT DR SPENCER ELLIS:
Our registered address: 20 Lodge Avenue, Elstree, HERTFORDSHIRE WD6 3ND. Alternatively, you can telephone 0208 207 2618.
Review of these policies: Dr Spencer Ellis keep this Policy under regular review.
This Policy was last updated in July 2019.