GDPR Policy

Last updated: 17th December 2024​

GDPR Policy: Victoria Carne Ltd., trading as Midwife Vix. 

Operating as Victoria Carne Ltd., trading as Midwife Vix, I am committed to protecting your privacy and ensuring the security of your personal data. This policy outlines how I collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) 2018.

1. Data Controller and Processor 

I act as both the Data Controller and the Data Processor, solely responsible for your privacy. The registered Data Controller is Victoria Carne Ltd. 

2. Information I Collect 

I only request and collect information that is necessary to provide services effectively and safely, for legal, contractual, and legitimate reasons. This may include:

  • Name and age

  • Address and contact details (email, phone number)

  • Your child's name, date of birth, and NHS number (when necessary for medical referrals or communication with other healthcare professionals)

  • Medical history (including obstetric and breastfeeding history)

  • Consultation notes

  • Care plans

  • Reports (which may include reports to your GP) 

3. How I Use Your Information 

Your information is used to:

  • Provide postnatal midwifery services

  • Communicate with you about your care

  • Liaise with other healthcare professionals involved in your care (with your consent)

  • Maintain accurate records of the care provided 

4. Data Storage and Security 

I take the security of your data seriously. Your information is processed and stored as follows: 

  • Paper records (medical history and consultation notes) are secured in a locked cabinet

  • Electronic records (weight charts, invoices, referral letters, follow-up plans, photos) are stored on a password-protected computer

  • Emails are password-protected

  • Phone communications are protected by passcode 

5. Data Retention 

In line with government requirements, I retain consultation data for a period of 25 years. 

6. Sharing Your Information 

I may share your information with other health professionals involved in your care, as outlined in the consent form. I will always seek your explicit consent before sharing any information.

7. Your Rights 

Under GDPR, you have the right to:

  • Request access to your personal data (free of charge, within one month of request)

  • Request correction of your personal data

  • Request deletion of your data (where appropriate)

  • Object to processing of your personal data

  • Request restriction of processing your personal data

  • Request transfer of your personal data

  • Withdraw consent 

8. Data Breaches 

In the unlikely event of a data breach that risks your rights and freedoms, I will notify you and the Information Commissioner's Office (ICO) within 72 hours. 

9. Changes to This Policy 

I may update this policy from time to time. Any changes will be posted on the website. 

10. Contact Me 

If you have any questions about this policy or how I handle your personal information, please contact Victoria Carne at: victoriacarne3@gmail.com 

11. Complaints 

If you are unhappy with how I've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (www.ICO.org.uk). 

Please note: While I take steps to ensure your information is secure, communications by text, email, messenger, social media, WhatsApp, and the website may not be fully secure. Please keep this in mind when using these methods to communicate sensitive information. 

By using the services, you acknowledge that you have read and understood this policy.