top of page


Our privacy policy has been reviewed and set out to underline the new rights for individuals within the new laws. The Data Protection Act 1998 was replaced by the General Data Protection Regulation (GDPR) on 25 May 2018. This major change has occurred to help protect and unify the way that an individual’s data is managed throughout the European Union (EU).

Our privacy policy is to let you know how we promise to look after your personal data and information at Barnes Practice treats your privacy seriously.

What information do we collect?

Barnes Practice collects a range of information about you during undertaking normal business activities. This may include your name, address, date of birth, contact details include email and phone number.

Why do Barnes Practice Process personal Data?

Under the new data protection law, it states that we can use and process personal information if we have an appropriate and lawful reason to do so. The law states that we must have one or more of the lawful reasons listed here:

  • If a contract is in place

  • If it is a legal obligation to do so to comply with the law

  • If we have been given clear, concise consent to process your data

  • If it is in our legitimate interests to do so.

Where does Barnes Practice store your data?

We store all personal data and insurance company information on our IT system, including a data base and e mail system. All patient notes are kept filed and locked away. All computer systems are password protected.

Who has access to data?

Your information will be shared internally across various teams in order to complete the enquiry process and/or fulfil your contract. We will only share your information with 3rd parties at your request or where require by law or part of your contract.

How does Barnes Practice protect your data?

We take the security of your data very seriously. All patient notes are kept filed and locked away. All computer systems, which hold personal data, are password protected.

We have internal policies in place to ensure your data is not lost, accidently destroyed, misused or disclosed, and is not accessed except by our employees in proper performance of their duties.

How long does Barnes Practice keep data?

In keeping with the CSP standards we are required to keep personal data for 8 years after last contact from you.

With regards to invoices, we hold them for 7 years from invoice date due to legal obligations. We will then delete all invoice data.

Your rights?

As a data subject you have several rights, you can:

  • Access data and obtain a copy of your data on request.

  • Require organisation to change incorrect or incomplete data

  • Require organisation to delete of stop processing data, for example, when data is no longer necessary for the purpose of processing.

  • Withdraw consent to us processing your data

  • If you would like to process any of these rights, please contact Barnes Practice.

  • If you believe the organisation has not complied with your data protection rights, you can complain to the information commissioner’s office.

What if you do not provide personal data?

You are under no statuary obligation to provide data to Barnes Practice. However, if you do not provide the required information we may be unable to complete the enquiries process or fulfil the contract with yourselves.

Address and contact details of data controller:

Barnes Practice

3a The maltings, Railway Place, Hertford, SG13 7BS Tel: 01992550069

E mail:


Cookies that we use

We use cookies for the following purposes:

analysis - we use cookies to help us to analyse the use and performance of our website and services; and

cookie consent - we use cookies to store your preferences in relation to the use of cookies more generally.

Cookies used by our service providers

Our service providers use cookies and those cookies may be stored on your computer when you visit our website.

We use Google Analytics to analyse the use of our website. Google Analytics and gather information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website.

Managing cookies

Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so varies from browser to browser, and from version to version.

Blocking all cookies will have a negative impact upon the usability of many websites.

If you block cookies, you will not be able to use all the features on our website.

bottom of page