GDPR - Privacy Notice

At the Medical Centre, we are committed to providing high quality NHS medical care for our patients in a friendly and caring environment. In order for our staff to deliver effective medical care, we collect and maintain personal health and treatment information about our registered patients.

What information do we collect about you?

We will collect information such as personal details, including name, address, next of kin, carer, records of appointments, visits, e-mails, telephone calls, your health records, treatment and medications, test results and any other relevant information.

How we will use your information

Patient data is collected for the purpose of providing direct patient care such as:

  • Referring patients to other healthcare providers for further tests/assessments and sharing test results/clinical findings with hospitals/community services for further care

  • Sending patient samples through a courier for laboratory testing (e.g. urine, bloods, cytology etc.)

  • Providing a Summary Care Record to Hospital and Out of Hours services should our patients require urgent treatment

  • Providing prescriptions to a Pharmacy nominated by the patient

  • Text message appointment reminders

  • Receiving and filing clinical letters/discharge summaries from consultants and other clinics where patients have received treatment

  • Clinical audits in support of improving patient care and services

  • Staff training purposes – All patient information is considered to be confidential and the Data Protection Act is strictly adhered to by all members of staff. All staff have read and signed the Practice’s confidentiality agreement and understand their responsibilities in complying

  • The Practice may be requested to support clinical research, however patient identifiable data will be removed unless prior consent is gained to being identified

  • Patient information can be disclosed if required by law or it is justified in the public interest

Maintaining confidentiality and accessing your records

We are committed to maintaining confidentiality and protecting the information we hold about you. We adhere to the General Data Protection Regulation (GDPR), the NHS Codes of Confidentiality and Security, as well as guidance issued by the Information Commissioner’s Office (ICO). You have a right to access the information we hold about you, and if you would like to access this information, you will need to complete a Subject Access Request (SAR). Please ask at reception for further information.

If any of your details such as your name, address or contact details have changed or incorrect, please notify the Practice as soon as possible for this to be amended and your record is kept both accurate and up-to-date.

ICO Registration No. Z8667972

Lead GP & Data Controller – Dr Sudath Talpahewa

Data Protection Officer - Mr Steve Durbin


Your Neighbourhood Professionals. Just a Click Away!
Your Neighbourhood Professionals. Just a Click Away!