Privacy Notice

Why we keep information about you

We keep records about your health, treatment and care because the law requires healthcare professionals to do so. This helps us provide safe, effective care and protect your wellbeing.

What information we hold

We may hold:

• Your name, address and contact details
• Your NHS number
• Information about your health, care, treatment and appointments

This includes “special category” (sensitive) health information.

How we use your information

We use your information to:

• Provide your direct care (appointments, referrals, prescriptions, test results)
• Run the practice safely — for example: quality checks, safeguarding, service planning
• Share information when the law requires us to (e.g., regulators or statutory bodies)

Who we share information with

We may share relevant information with other organisations involved in your care, such as:

• NHS hospitals
• Community services
• Pharmacies
• Other approved health providers

We may also share limited information for NHS planning and reporting when the law allows it.

Research and NHS planning

Sometimes, health information helps the NHS:

• improve services
• understand demand
• support research
• monitor safety and quality

Where possible, we use anonymous or de‑identified data so you cannot be identified.

If identifiable information is needed, it will only be used when the law allows it or when you give explicit consent, which you can withdraw at any time.

Your choices (opt-outs)

You can choose to opt out of some types of data sharing beyond your care:

Type 1 Opt-Out

Stops your GP practice sharing your confidential information outside the practice for research/planning (except where required by law or for direct care)

National Data Opt-Out

Stops NHS England and other organisations sharing your confidential patient information for research/planning (with some legal exceptions).

Opt out of sharing your health records – NHS

How long we keep your records

We keep records for the periods set out in the NHS Records Management Code of Practice and dispose of them securely when no longer needed.

Your rights

You have rights to:

• Be informed
• Access your records
• Ask us to correct mistakes
• Request restriction or object to some uses of your data
• Other rights under data protection law

Questions, concerns or complaints

If you have any questions or are unhappy about how we use your information, please speak to us. You can also contact the  Information Commissioner’s Office (ICO) for independent advice.

Data Protection Officer (DPO)

Our DPO function is provided by NHS Kent and Medway:
kmicb.gpdpoteam@nhs.net

For more information please read our full privacy notice here