Why we hold information about you

• To be able to provide you with high quality health care. This information provides a basis for the health decisions we make about you.
• To provide you with Health protection advice and information, for example this may include messages about the Flu vaccination programme, or health checks.
• As a practice we do engage in research. The aim is to make advances in medicine to improve health care in the future. You may be invited to enrol within a research programme. We may use your personal details to contact you about this.

This information can be in paper or online form.

We access and process the data under the lawful basis of ‘legitimate interest’- of providing health care and public health.

In the cases of research we will use your information under the lawful basis of consent.

What information will we hold?

• Basic details including Name, Date of birth, Address and if provided details of Next of kin, family to contact with your consent
• Clinical consultations, these will include, telephone consultations and face to face
• Correspondences about your health/clinic appointments from the hospital and other health care professionals
• Details of investigations and results for example, bloods and x-rays
• Family history if relevant.
• Other data for outside agencies for example, Gun licensing.

Confidential information

1. All information we keep about you is kept safe.
2. Information is shared only with those who are involved in your health care or if we have gained your consent to share elsewhere. You may be contacted directly by the practice to participate in research.
3. Information cannot be shared with your family members unless explicit consent has been given. There are a few exceptions to this for example if the patient does not have capacity or in cases where consent cannot be gained, (in this situation vital interest would be considered).

Sharing Information

We will share the information with people providing you care or involved in research (unless you ask us). Anyone accessing and using your data must keep this confidential.

Any information shared without permission will adhere to the General Data Protection Regulations 2018 (GDPR) and the Data Protection Act 2018.

Yours Rights

• You have a right to Confidentiality
• Right to access yours records; this needs to be in writing and will require photo identification.
• The right to rectification
• The right to erasure. However if this erasure is seen as harmful to the process of providing health care or fraudulent in erasing information important to insurance companies etc. it can be refused.
• The right to restrict processing
• The right to object
• Right to data portability