office@mrpeterhull.co.uk

GDPR Policy

Please read the following information carefully. This notice contains information about the information collected, stored and otherwise processed about you and the reasons for the processing.

Who am I?

I practice as an expert orthopaedic witness. My registered address is:

PO Box 1379
Cambridge CB1 0HE

The supervisory authority in relation to data protection legislation is the Information Commissioner's Office. The details for this body are at the bottom of this document. The ICO registration number is Z277413X.

Mr Hull, uses and is responsible for personal information about you. I may process your data in some circumstances on instruction from solicitors, but in other circumstances (such as when I ask questions for the purpose of producing an expert report) I as an individual associate will be seen as a "controller" of your information for the purposes of data protection legislation. Mr Hull may also been seen as a controller of your data. We are joint controllers of your data.

Why do you process my data?

We operate as an expert witness business. We use your data to:

  • Assess whether we are able to assist with new enquiries in relation to producing reports/medico-legal services;
  • Provide medico-legal reports and opinion;
  • Carry out conflict checks;
  • Keep internal records and analyse the same;
  • Carry out our services effectively.

I rely on the following as the lawful bases on which I collect and use your personal information:

  • Because it is in our legitimate interests as an expert witness to do so. We need to process the data listed above in order to provide expert advice and/or;
  • Because it is necessary for the performance of a contract that you as the data subject are party to and/or;

We also process personal data pursuant to our legitimate interests in running our business, for example for the purposes of;

  • Producing invoices and receipts; Carrying out office administration;
  • Training associates and employees.

In relation to any special category personal data, such as health records or information concerning race, ethnic origin or sex amongst other factors, we rely on the legal claims basis for processing this data, in addition to the legal bases set out above. This is because it is necessary for the establishment, exercise or defense of legal claims.

What data do I collect?

We process the personal data of individuals who are involved in a legal claim or who are obtaining legal advice. We also process personal data of witnesses and others with links to this case.

The data I collect from you will be both personal and sensitive data and will include:

(a) Personal details;
(b) Family details;
(c) Details regarding your lifestyle and social circumstances;
(d) Financial Details;
(e) Education, training and employment details;
(f) Physical or mental health details;
(g) Information about race or ethnic origin;
(h) Details regarding sex life or sexual orientation;
(i) Other personal data relevant to instructions to produce an independent medico-legal report, including data specific to the instructions in question.

Where do I get your information from?

I may obtain data from you directly. The information is generally provided by the people instructing Mr Peter Hull, which is usually a solicitor. I may also obtain the same categories of information from other legal experts, legal professionals, medical professionals, your family and friends, witnesses, members of the public, Courts and other tribunals, investigators, government departments, regulators and public records and registers.

Who do you share my data with?

We share personal data internally strictly on a need to know basis.

We will share your data with parties associated with the case for the purpose of providing an expert report. We may share information with outsourced services providers such as photocopying companies and digital dictation services, but this is pursuant to them confirming they are GDPR compliant via written contracts.

If required, we may share information with the HMRC and the VAT Commissioner as they require, or with others pursuant to a Court Order.

International Transfers

Mr Hull does not routinely transfer personal information outside of the European Economic Area (EEA), however, should the need to do so it will be because it is necessary for the establishment, exercise or defence of legal claims. We will also ensure that where such transfers are carried out, they are done using secure methods that offer sufficient assurance and guarantees that your data is afforded the necessary safeguards to prevent it from accidental or unlawful loss, disclosure, access, alteration or destruction.

How is my data processed?

We risk assess our policies and procedures regularly in accordance with GDPR guidance and legislation. We implement technical and organisational measures to ensure that we secure personal data in a manner that takes account of the potential risks involved for your rights and interests.

Please note that it is standard practice for us to have agreements in place with our instructing solicitor where all requests associated with the legal case will be passed to the instructing solicitor and they will be responsible for actioning the same. We will respond to you within one month from when we receive your request.

How long do you retain my data for?

We will store information for at least 1 year after the expiry of any relevant limitation period (which will usually be 6 years, or longer where the case includes information relating to a minor) from the date that we are notified the case has settled or been closed or discontinued or that I am not required as an expert witness. I will apply the principle of data minimisation and therefore will not store all data I have received.

In the case of a minor, the information will be retained for at least 1 year after the expiry of any relevant limitation period (which will usually be 6 years following the date of the minor's 18th birthday).

This is because it may be needed for potential legal proceedings. At this point any further retention will be reviewed and the data will be marked for deletion or marked for retention for a further period. The latter retention period is likely to occur only where the information is needed for legal proceedings, regulatory matters or active complaints. Your name may be included on invoices which will be retained for seven years at the completion of the relevant tax year.

We will store some of your information which I need to carry out conflict checks for the rest of my career and/or for as long as Mr Peter Hull is operating. However, this is likely to be limited to your name and date of birth. This will not contain any sensitive data. Deletion will be carried out (without further notice to you) as soon as reasonably practicable after the data is marked for deletion.

What are my rights?

Under the GDPR, you have a number or rights that you can exercise in certain circumstances and these are free of charge. We are committed to your rights to privacy. In summary you may have the right to:

  • Ask for access to your personal information and any other supplementary information;
  • Ask for correction of mistakes in your data or to complete missing information I hold on you;
  • Ask for your personal information to be erased, in certain circumstances;
  • Ask to receive a copy of the personal information you have provided to me or have this information sent to a third party. This will be provided to you or the third party in a structured, commonly used and machine- readable format, e.g. a Word file; Object to the processing of data we carry out based on our legitimate interest;
  • Restrict my processing of your personal information in certain circumstances;
  • Request not to be the subject to automated decision making which produces legal effects that concerns you or affects you in a significant way.

Who we are?

Peter Hull works alongside some of the UK’s leading solicitors. Mr Hull writes reports on all aspects of general orthopaedic trauma surgery but has a special interest in complex lower limb trauma surgery and pelvic & acetabular fractures.

This notice will tell you who I share your information with and the security procedures I have in place in order to protect your data. It also provides further information on how you can contact me if you wish to obtain further information.

Contact Us

If you want to exercise any of the rights, then please use the contact details below. Please note that we may need to ask you to provide further information so you can be identified.

Mr Peter Hull PO Box 1379
Cambridge CB1 0HE
Phone: 01223 603871
Email: office@mrpeterhull.co.uk Web: www.mrpeterhull.co.uk

The GDPR also gives you the right to lodge a complaint with the Information Commissioner's Office if you are in the UK, or with the supervisory authority of the Member State where you work, normally live, or where the alleged infringement of data Protection laws occurred. The Information Commissioner's Office can be contacted at https://ico.org.uk/concerns/ or 0303 123 1113.

All Correspondence to:
office@mrpeterhull.co.uk

Consulting Rooms:
Ten Harley Street, London
The Beechwood Medical Practice, Cambridge
Telephone: 01223 603 871