We respect your right to privacy and keep all your health information confidential and secure. It is important that the NHS keeps accurate and up-to-date records about your health and treatment so that those treating you can give you the best possible care.
Your health information may be used for management and audit purposes. However, it is usually only available to, and used by, those involved in your care. You have the right to know what information we hold about you. There is more information below about how to access your medical records.
GDPR – how we use your information
- We collect and hold data about you for the purpose of providing safe and effective healthcare.
- Your information may be shared with our partner organisations to audit services and help provide you with better care.
- Information sharing is subject to strict agreements on how it is used.
- We will only share your information outside of our partner organisations with your consent.
- If you are happy with how we use your information you do not need to do anything.
- If you do not want your information to be used for any purpose beyond providing your care please let us know so we can code your record appropriately.
- You can object to sharing information with other health care providers but if this limits your treatment options we will tell you.
- Our guiding principle is that we are holding your information in the strictest confidence.
- For more information about who are our partner organisations and how your data is used please see the privacy notice or ask at reception.
Information for health – your records
The practice is registered and complies with the Data Protection Act 2018. We respect your right to privacy and keep all your health information confidential and secure. For further information please see our privacy notice and the Summary Care Record consent form or the Summary Care Record opt out form which you complete when registering with our practice.
Giving consent to a relative / next of kin
If you would like a relative / next of kin to speak to us on your behalf , please complete the Information Sharing Agreement between Patient and Carer form and return it to us so that your relative / next of kin, are authorised to speak to us about your medical information, test results etc. Unless this form is completed and returned to us, we will not be able to discuss your health with them. This is an important part of patient confidentiality, to protect all of our patients.
Minuteful Kidney service for patients with diabetes
Minuteful Kidney service for patients with diabetes (and/or other conditions) The data is being processed for the purpose of delivery of a programme, sponsored by NHS Digital, to monitor urine for indications of chronic kidney disease (CKD) which is recommended to be undertaken annually for patients at risk of chronic kidney disease e.g., patients living with diabetes.
The programme enables patients to test their kidney function from home. We will share your contact details with Healthy.io to enable them to contact you and send you a test kit. This will help identify patients at risk of kidney disease and help us agree any early interventions that can be put in place for the benefit of your care. Healthy.io will only use your data for the purposes of delivering their service to you.
If you do not wish to receive a home test kit from Healthy.io we will continue to manage your care within the Practice. Healthy.io are required to hold data we send them in line with retention periods outlined in the Records Management code of Practice for Health and Social Care. Further information about this is available at: https://lp.healthy.io/minuteful_info/
Privacy Notice – Enhanced Access
To enable us to provide our Enhanced Access Service to you, GPs from other local practices will at times have access to your full GP record but only when providing direct care to you.
People who have access to your information will only normally have access to that which they need to fulfil their roles, for instance admin staff will normally only see your name, address, contact details, appointment history and registration details in order to book appointments, the practice nurses will normally have access to your immunisation, treatment, significant active and important past histories, your allergies and relevant recent contacts whilst the GP you see or speak to will normally have access to everything in your record.
Download the Full Privacy Notice for Enhanced Access
Privacy Notice – Accurx on-line consultation services
To enable us to provide online consultations we use a service called ‘Accurx’ please see their privacy notice below
| As part of the Digital First National programme of work, GP Practices are required to provide a tool for patients to access primary care services.
The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients. Using the Accurx platform will require the processing of special category data by Accurx, their sub-processors and by default the GP Practice as a Controller. This will include; exchanging and storing messages in relation to patients and medical staff, performing video consultations (these will not be recorded or stored) between healthcare staff and their patients This will allow you to respond to the Practice in multiple ways such as; free text, questionnaires and submitting images/documents.
If you have a non-urgent healthcare concern or need to contact the Practice for any medical or admin reason, click on the online via our website or via NHS app or via NHS website. Fill out the online form, which will then be reviewed and processed by our healthcare professionals to decide the right care for you. We will respond to every online request 2 workings days Accurx is approved by NHS England to be used by GP practices and the other systems involved in patient care. NHS England has a lengthy assurance process to make sure they meet the highest standards of safety and security. Your data is safe and is shared only with your GP Practice for the purposes of your direct care. Your data is stored and sent securely using industry best practices, and Accurx only collect the data that is necessary to allow your GP Practice to provide you with care.
The Practice uses the following Accurx features:
Accurx’s privacy notice can be found on their website here: Accurx | Privacy Policy | |
| 1) Controller contact details
| Clapham Park Group Practice, 72 Clarence Avenue, LONDON, SW4 8JP
|
| 2) Data Protection Officer contact details
| GP Data Protection Officer |
| 3) Purpose of the processing | The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients.
|
| 4) Lawful basis for processing | Under UK GDPR and DPA 2018 – 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.
9(2)(h) ‘…medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems…’
|
| 5) Recipient or categories of recipients of the shared data | Data may be shared with Accurx, and their sub-processors such as cloud services used for Accurx’s own storage, communications, security, engineering, and similar purposes. |
| 6) Rights to object | You have the right under Article 21 of the UK GDPR to object to your personal information being processed. Please contact the Practice if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.
|
| 7) Right to access and correct | You have the right to access copies of the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law. |
| 8) Retention period | The data will be retained for active use during the processing and thereafter according to NHS Policies and the law. |
| 9) Right to Complain. | You have the right to complain to us about the way your data is handled or processed. To so, please contact the Practice using the following details: Clapham Park Group Practice, 72 Clarence Avenue, LONDON, SW4 8JP
If you remain unsatisfied with our response, you have a right to complain to the Information Commissioner’s Office. To do so, you can use this link https://ico.org.uk/make-a-complaint/data-protection-complaints/ or call their helpline Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate) There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website) |
