Data Protection Policy

Breast-screening 
for all women 

Niramai Ltd holds various information on its employees and clients. This information is in various formats for the following purposes:

• Contact with customers (potential and actual)

• Contact with medical practitioners

• Informing and performing screening activities for accuracy

• Case studies and reviews

The employee information is only processed for staff administration. It is held securely and is available for the individuals review on request to the CEO.

Client information includes personal contact details and payment details via a Practice Management System.  This information will be kept for 14 months however the client has the Right To Erasure within the 14 months according to GDPR Act of 2018 (GDPR Act 2018).

All information is held in accordance with the GDPR Act and our staff are trained and managed to ensure when handling this information as follows:

1. Personal data shall be processed fairly and lawfully.

2. Processed only for the specified purpose.

3. Adequate, relevant and not excessive for those purposes.

4. Personal data shall be kept accurate and, where necessary, kept up to date and securely removed if incorrect.

5. Kept for no longer than 14 months.

6. Processed in line with the rights of individuals – this includes their right to be informed of all the information held about them, to prevent processing or their personal information for marketing purposes, and to compensation if they can prove they have been damaged by our non-compliance with the Act.

7. Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

8. Personal data shall not be transferred to a country or territory outside the United Kingdom unless that country or territory ensures an adequate level of protection for the rights and freedoms of data subjects in relation to the processing of personal data.

Consent will be gained from each customer before their information is used for further internal marketing; this consent is obtained on an initial conversation.

As part of Niramai’s commitment to Data Protection and continual improvement we are registered with the ICO (Information Commissioners Office).