GDPR/ Privacy notice

All GP practices in England are legally required to share data with NHS Digital for the purposes of Research and Planning under the Health and Social Care Act 2012 (2012 Act). More information about this requirement is contained in the data provision notice issued by NHS Digital to GP practices.

You can learn more about how NHS Digital uses your data here: General Practice Data for Planning and Research: GP Practice Privacy Notice – NHS Digital.

Why we collect information about you

Your Doctor and other health professionals caring for you keep records about your health and any treatment and care you receive from the NHS. They may be written down (manual records),or held on a computer.

The record may include:

  • Basic details about you, such as address, DOB, and next of kin
  • Contacts we have had with you, such as surgery visits
  • Notes and reports about your health and any treatment you have received.
  • Results of investigations, such as X-rays, and laboratory tests
  • Relevant information from other health professionals

How we keep your records confidential

  • Everyone working for the NHS has a legal duty to keep information about you confidential.
  • Anyone who receives information from us is also under a legal duty to keep it confidential.
  • Our guiding principle is that we are holding your records in strict confidence.

View our ICO registration certificate (PDF).

For further information, please see the following information:

Fair processing notice

Your information, your rights

Our Fair Processing Notice explains why we collect information about you and how that information may be used to deliver your direct care and manage the local health and social care system.

The notice reflects:

  • What information we collect about you;
  • How and why we use that information;
  • How we retain your information and keep it secure;
  • Who we share your information with and why we do this.

The notice also explains your rights in relation to consent to use your information, the right to control who can see your data and how to seek advice and support if you feel that your information has not been used appropriately.

A full copy of the Fair Processing Notice is available from Reception. We are happy to make an appointment to read this out to any patients who are sight impaired or print it in large print, please just request this at reception.

National data opt-out

National data opt-out (NDO-O) was introduced along with the Data Protection Act 2018 and GDPR on 25th May 2018. This followed recommendations from the National Data Guardian (NDG) that patients should be able to opt-out of their personal confidential data being used for purposes other than their direct medical care

A patient has to register their choice to opt out only once, and that registration applies to all healthcare settings and organisations, not just general practice. They can do this by using one of the following:

  • Online service – Patients registering need to know their NHS number or their postcode as registered at their GP practice
  • Telephone service 0300 303 5678 which is open Monday to Friday between 9am and 5 pm
  • Google play
  • “Print and post” registration form (PDF). Photocopies of proof of applicant’s name (e.g. passport, UK driving licence etc.) and address (e.g. utility bill, payslip etc.) need to be sent with the application. It can take up to 14 days to process the form once it arrives at NHS, PO Box 884, Leeds, LS1 9TZ

Additional privacy notices