Privacy Notice

Our contact details:

The type of personal information we collect 

We currently collect and process the following information:

• Personal identifiers, contacts and characteristics (for example, name and contact details including email addresses).
• We also collect NOK details and this information is handle under the same policy.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• Registration purpose 
• We also receive personal information indirectly, from the following sources in the following scenarios:
  • Information about care and treatment that you may have had with other NHS health care providers, for example if your GP practice has referred you for treatment within the NHS, relevant information about you will be shared with that provider and they will in turn provide your GP practice with information on the treatment they have given and the outcomes of any tests.
  • Results of investigations, such as laboratory tests, x-rays, etc.
  • Any record of contact the surgery has had with you, such as past appointments, clinic visits, emergency appointments, etc.

All calls may be recorded for training and quality purposes.

We use the information that you have given us in order to correctly identify yourself when making appointments, carrying out medical consultations and referrals for further care.

Health care professionals who provide you with care are required by law to maintain records about your health and any treatment or care you have received within any NHS organisation. The information that makes up your record is also essential to help us provide you with the best possible healthcare. We collect and hold data for the purpose of providing healthcare services to our patients and running our organisation which includes monitoring and improving the quality of care that we provide.

In carrying out this role we may collect information about you which helps us respond to your queries, provide you with the most appropriate care, or arrange specialist services on your behalf. We may keep your information in written form and/or in digital/electronic form. The records will include basic details about you, such as your name and address. They may also contain sensitive information about your health such as outcomes of assessments and investigation results (for example blood tests and radiology). All information about you is treated confidentially.  

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are: 

• We have a contractual obligation.
• We need it to perform a public task.

How do we store your personal information

Your information is securely stored.

We will approach the longer term management of our patient records in line with the Records Management NHS Code of Practice for Health and Social Care. This sets out the required standards of practice for managing the records that staff working within or under contract to NHS organisations in England must follow; and it is based on current legal requirements and professional best practice.

Your data protection rights

Under data protection law, you have rights including:

Your right of access

You have the right to ask us for copies of your personal information. 

Your right to rectification

You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

Your right to erasure

You have the right to ask us to erase your personal information in certain circumstances. 

Your right to restriction of processing

You have the right to ask us to restrict the processing of your personal information in certain circumstances. 

Your right to object to processing

You have the right to object to the processing of your personal information in certain circumstances.

Your right to data portability

You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact the practice manager if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at:

MAKE A COMPLAINT ONLINE

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

Make a complaint to the ICO