Privacy notice
How we use and protect your personal information.
This notice explains what we do with information about you. It covers the UK General Data Protection Regulation and the Data Protection Act 2018.
Who we are
We are the data controller for your medical records. Our details are on the contact page.
What information we hold
We hold your name, address, date of birth and contact details.
We hold your medical records. These include notes, test results, letters from hospitals, and details of your medicines.
Why we use it
We use your information to give you care and treatment. This is our main reason.
We also use it to run the practice, to check the quality of our care, and to meet legal duties.
Our legal basis
Under UK GDPR we rely on Article 6(1)(e) and Article 9(2)(h). In plain terms, we process your data to provide healthcare in the public interest.
Who we share it with
We share information with other NHS organisations involved in your care. This includes hospitals, out of hours services and community teams.
We share it where the law requires it, for example to report certain infectious diseases.
We do not sell your information. We do not use it for advertising.
How long we keep it
We follow the NHS Records Management Code of Practice. GP records are usually kept for 10 years after death, or until a child turns 25.
Your rights
You can ask to see your record. This is called a subject access request. It is free and we will reply within one month.
You can ask us to correct anything that is wrong.
You can object to some uses of your data.
National data opt-out
You can stop your confidential information being used for research and planning. Your care will not be affected. Go to nhs.uk/your-nhs-data-matters.
Our Data Protection Officer
Contact details are at the bottom of this page.
Complaining about how we use your data
Contact us first. You can also complain to the Information Commissioner's Office. Call 0303 123 1113 or go to ico.org.uk.
Our Data Protection Officer