Under the Data Protection Act 1998 you have certain rights relating to records kept. This information sheet describes those rights, the records kept and my confidentiality policy.

The 8 principles of the Act are:

• That information should be obtained and used fairly and lawfully.

• Personal data should only be held for specific lawful purposes.

• Personal data shall not be used or disclosed in any way incompatible with the purpose for which it is held.

• Personal data shall be adequate, relevant, and not excessive.

• Personal data shall be accurate and kept up to date.

• Personal data shall not be kept for longer than necessary to fulfil the purpose for holding it.

• Appropriate securing measures shall be taken to safeguard unauthorised access, disclosure or damage to personal data and where appropriate steps taken to have it erased or corrected.

• Personal data shall only be obtained or used within the European Economic Area unless there are adequate protections in the receiving territories.