We may update this Privacy Notice from time to time as necessary. The terms that apply to you are those posted here on our website on the day you use our website. We advise you to print a copy for your records.

If you have any question regarding our Privacy Policy, please contact us.

Our Privacy Policy has been compiled so as to comply with the Law of every country or legal jurisdiction in which we aim to do business. If you think it fails to satisfy the Law of your jurisdiction, we would like to hear from you.

However, ultimately it is your choice as to whether you wish to use our website.

The right of access

Individuals have the right to access their personal data and a request can be made verbally or in writing. We have one month to respond to a request and in most circumstances we cannot charge a fee. Please refer to our Subject Access Request section for further information.

The right to rectification

The GDPR includes a right for individuals to have inaccurate personal data rectified or completed if it is incomplete. We have one month to respond to a request and in some circumstances, we may refuse this request.

The right to data portability

The right to data portability allows individuals to obtain and re-use their personal information for their own purposes across different services. It allows them to move, copy or transfer personal information easily from one IT environment to another in a safe and secure way. For example: it enables consumers to take advantage or applications and services which can use their information to find them a better deal.The right to data portability only applies when the individual has submitted their personal information directly, through electronic means to our Practice.This means that in most circumstances the right to data portability does not apply within the Practice.

Rights related to automated decision making and profiling

You have the right to object to any instances where a decision is made about you solely by automated means without any human involvement, including profiling.

The Practice does not undertake any decision-making about you using wholly automated means.

Invoking your rights

If you wish to invoke any of the data subject rights then please write to The Practice Manager, at the above address.

As an alternative to face to face appointments, there may be instances where we may offer you an appointment via telephone or video consultation. By accepting the invitation and entering the consultation you are consenting to this. Your personal/confidential patient information shared on the consultation will be safeguarded in the same way it would with any other consultation with relevant information added to your patient record.

All Telephone calls are recorded ,Video consultations/appointments are not typically recorded, but if are, your permission will be sought as to the purpose and use of the recording i.e.: for direct care purposes: diagnosis, treatment or care. Recordings will be stored as part of your patient record in line with NHS Digital Record Management Code of Practice (2016).

If, as part of the consultation, still images or photographs are taken/obtained and are to be kept, they will be securely stored as part of your patient record in line with NHS Digital Record Management Code of Practice (2016).

If the recording/images are to be used for any other reason than what the original permission was obtained for, then further permission would be required prior to that use.

If recordings or still images obtained are no longer needed (i.e.: adequately described in the clinical notes) then the recording/ images will be confidentially and securely destroyed as per our policies and in line with NHS Digital’s guidance.

Use of information we collect through automated systems when you visit our website

Cookies

Cookies are small text files that are placed on your computer’s hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved.

Some cookies may last for a defined period of time, such as one day or until you close your browser. Others last indefinitely.

Your web browser should allow you to delete any you choose. It also should allow you to prevent or limit their use.

Our website uses cookies. They are placed by software that operates on our servers, and by software operated by third parties whose services we use.

If you choose not to use cookies or you prevent their use through your browser settings, you will not be able to use all the functionality of our website.

We use cookies in the following ways:

• to track how you use our website
• to record whether you have seen specific messages we display on our website
• to keep you signed in our site
• to record your answers to surveys and questionnaires on our site while you complete them

Personal identifiers from your browsing activity

Requests by your web browser to our servers for web pages and other content on our website are recorded.

We record information such as your geographical location, your Internet service provider and your IP address. We also record information about the software you are using to browse our website, such as the type of computer or device and the screen resolution.

We use this information in aggregate to assess the popularity of the webpages on our website and how we perform in providing content to you.

If combined with other information we know about you from previous visits, the data possibly could be used to identify you personally, even if you are not signed in to our website.

Data may be processed outside the European Union

Our website is hosted in the United Kingdom.

We may also use outsourced services in countries outside the European Union from time to time in other aspects of our business.

Accordingly data obtained within the UK or any other country could be processed outside the European Union.

For example online patient forms on our website are encrypted and delivered securely to the NHS system by an email service provider based in the United States of America. Their systems comply with provisions certified under the EU-U.S. and Swiss-U.S. Privacy Shield frameworks, a mechanism for cross border transfer of personal data.

Sometimes we record information about third parties mentioned by you to us during any consultation. We are under an obligation to make sure we also protect that third party’s rights as an individual and to ensure that references to them which may breach their rights to confidentiality, are removed before we send any information to any other party including yourself. Third parties can include: spouses, partners, and other family members.

The NHS Constitution establishes the principles and values of the NHS in England. It sets out the rights patients, the public and staff are entitled to. These rights cover how patients access healthcare services, the quality of care received, the treatments and programmes available, confidentiality, information and a patient’s right to complain if things go wrong.

The NHS Care Record Guarantee for England sets out the rules that govern how patient information is used in the NHS, what control the patient can have over this, the rights individuals have to request copies of their data and how data is protected under the Data Protection Act 2018.

NHS digital looking after information and data