Apex Radiology collects and uses certain types of information about patients and individuals who interact with us. This information, whether collected on paper, stored in a computer database, or recorded on other material, is safeguarded under the Jamaica Data Protection Act 2020.

Apex Radiology is the Data Controller, meaning we determine the purposes for which personal information will be used. We also notify the Information Commissioner about the data we hold and its general purposes.

We may share your data with agencies such as the local authority, funding bodies, and other voluntary agencies. Generally, you will be informed about how and with whom your information will be shared. If there are circumstances where we may be obligated to disclose your data, they may include the following:

- Fulfilling a legal duty

- Protecting vital interests

- When you have already made the information public

- During legal proceedings

- For equal opportunities monitoring

- Providing confidential services without consent in certain situations

Apex Radiology ensures personal information is treated lawfully and correctly by adhering to the Data Protection Principles:

- Fair and lawful processing

- Collected for specified purposes

- Adequate, relevant and not excessive

- Accurate and up-to-date

- Not kept longer than necessary

- Processed in accordance with your rights

- Kept secure

- Not transferred outside of Jamaica without adequate protection

When collecting your information, we ensure that you:

- Understand what we’re asking you about

- Understand why the information is needed

- Know enough about how your information will be used

- Don’t feel pressured to give us your consent

- Know what will happen if you don’t give us your consent

- Explicitly consent to data processing if you give us your consent

Information and records will be stored securely and accessed only by authorized personnel. Data will be stored only as long as necessary and disposed of appropriately. We ensure that all personal and company data is non-recoverable from any computer system previously used within the organization before it is passed on or sold.

You have the right to access the information we hold about you. We will continue to take reasonable steps to keep your information up-to-date by asking if there have been any changes.

We have:

- Assigned a Data Protection Officer to ensure compliance.

- Ensured everyone processing personal information has been trained and is supervised.

We will continue to:

- Respond promptly to inquiries about personal information handling.

- Regularly review and audit our data handling practices.

- Take disciplinary action for breaches of this policy.

This policy will be updated as necessary to reflect best practices in data management and compliance with the Jamaica Data Protection Act 2020.

For any questions regarding this policy, please contact the Apex Radiology Data Protection Officer using the contact information below.

Name: Francois Brown

Email: francois.brown@apex-radiology.com

Data Controller: Person/entity deciding how and why personal information is processed.

Jamaica Data Protection Act 2020: Jamaican law for responsible behaviour in using personal information.

Data Protection Officer: Person ensuring compliance with data protection policies.

Patient/Individual: Person whose information is processed.

Explicit consent: Informed agreement for processing sensitive data.

Information Commissioner: Overseer of the Jamaica Data Protection Act 2020.

Processing: Handling personal information.

Personal Information: Identifiable information about living individuals.

Sensitive Data: Information on racial or ethnic origin, political affiliations, religion, trade union membership, health, sexuality and criminal record.