Privacy Notice

Why do we keep records about you

Healthcare professionals are required by law to keep records about your health and care. This helps us provide safe care and protect your wellbeing.

What information we hold

This can include your contact details, NHS number, and information about your health, care and treatment. Health information is treated as “special category” (sensitive) data.

How we use your information

We use your information to:

• provide your direct care (appointments, referrals, prescriptions, test results)
• run the practice safely (quality checks, safeguarding, audit, service planning)
• share information where the law requires it (e.g., regulators and statutory bodies)

Who we share it with

When needed, we share relevant information with other organisations involved in your care, such as NHS hospitals, community services, pharmacies and approved providers. We also share limited information for NHS planning and reporting where allowed by law.

Research and planning (uses beyond your direct care)

Sometimes information from health records is used to help the NHS plan and improve services (for example, understanding demand for clinics, monitoring quality and safety, or improving care pathways) and to support approved research.

Wherever possible, this is done using anonymised or de‑identified information, so you cannot be identified. If identifiable (confidential) patient information is needed for research or planning, it will only be used or shared when the law allows it and appropriate safeguards are in place, or where you have given explicit consent. Where we rely on consent, you can withdraw it at any time.

Your choices (opt-outs)

You can opt out of certain data sharing beyond your own care:

• Type 1 Opt-Out: stops your GP practice sharing your confidential information outside the practice for research/planning (except where required by law or for direct care) Opt out of sharing your health records – NHS
• National Data Opt-Out: stops NHS England and other organisations sharing your confidential patient information for research/planning (with some legal exceptions). Opt out of sharing your health records – NHS

How long we keep your records

We keep records for the periods set out in the NHS Records Management Code of Practice and dispose of them securely when no longer needed.

Your rights

If you are unhappy, you can complain to the practice and also to the Information Commissioner’s Office (ICO)

Our Data Protection Officer function is provided by NHS Kent and Medway who can be contacted via email kmicb.gpdpoteam@nhs.net

For more information please read our full privacy notice here