Privacy Policy
Moon & Meadow Midwifery Privacy Policy
Moon & Meadow Midwifery is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and our professional obligations under the Nursing and Midwifery Council (NMC).
1. Data Controller
The Data Controller is Kerry Baker, trading as Moon & Meadow Midwifery. Kerry Baker is a registered midwife with the Nursing and Midwifery Council (NMC) and is registered with the Information Commissioner’s Office (ICO).
2. Information We Collect
We may collect and process the following categories of personal information:
– Personal identification details (name, address, date of birth, contact details).
– Medical and health information, including maternity and obstetric history, clinical records, test results, and relevant family history.
– Next of kin and emergency contact details.
– Payment and billing information.
– Communication records, including emails, text messages, and website enquiry forms.
– Website usage data, including cookies and IP addresses (see Section 9).
3. Lawful Basis for Processing
We process your personal data under the following lawful bases:
– Contract: to provide the care and services you have requested.
– Legal obligation: to comply with UK law and regulatory requirements.
– Vital interests: to protect your life or the life of your baby in an emergency.
– Consent: where you have given explicit permission, for example, for sharing information with other healthcare professionals.
– Legitimate interests: to maintain accurate records, manage our business, and improve services.
4. How We Use Your Information
Your personal data is used for the following purposes:
– To provide safe, effective, and personalised maternity care.
– To liaise with other healthcare providers, including your GP, hospital, or laboratory, where appropriate.
– To issue invoices and manage payments.
– To maintain clinical records as required by law and professional standards.
– To respond to queries, feedback, or complaints.
– To meet audit, insurance, and regulatory obligations.
5. Sharing Your Information
We will not sell or share your personal data with third parties for marketing purposes. We may share your information with:
– NHS organisations, including your GP and hospital maternity services.
– Pathology laboratories for blood tests.
– Professional regulators such as the NMC.
– Insurers and legal advisers where required.
– Safeguarding bodies if there are concerns for your safety or that of your child.
We will always seek your consent before sharing your information unless required by law or in an emergency.
6. Data Storage and Retention
Your personal information will be stored securely in both paper and electronic form. Clinical records will be retained for 25 years after the date of the last entry, in line with NHS and NMC requirements. Non-clinical data (e.g., enquiries) will be retained for no longer than 2 years, unless required for legal or professional purposes.
7. Data Security
We have implemented appropriate technical and organisational measures to protect your data from accidental loss, unauthorised access, alteration, or disclosure. These include password-protected systems, secure storage of paper notes, and restricted access to authorised individuals only.
8. Your Rights
You have the following rights under UK GDPR:
– The right to be informed about how your data is used.
– The right to access a copy of your personal data.
– The right to request correction of inaccurate or incomplete data.
– The right to request erasure of data where appropriate (‘right to be forgotten’).
– The right to restrict processing in certain circumstances.
– The right to data portability.
– The right to object to processing based on legitimate interests.
– The right to withdraw consent at any time.
– The right to lodge a complaint with the ICO (www.ico.org.uk).
9. Cookies and Website Use
Our website may use cookies to improve functionality and user experience. Cookies are small files placed on your device that help analyse web traffic or remember preferences. You can choose to accept or decline cookies through your browser settings. Declining cookies may limit website functionality.
10. External Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies when visiting external sites.
11. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in law, regulation, or practice. The latest version will always be available on our website.
12. Contact
If you have any questions about this Privacy Policy or how your information is handled, please contact:
Kerry Baker
Moon & Meadow Midwifery
Email: kerry@moonandmeadowmidwifery.com
ICO Registration Number: ZB965168