Summary Privacy Notice

Our policy

This summary explains how Parkbury House Surgery uses and protects your personal information. It should be read alongside our full Privacy Notice, which is available from our practice

We are committed to protecting your privacy, respecting your rights under UK data protection law, and being open about how your information is used.

Who holds information about you?

To provide safe and effective healthcare, information about you is held by Parkbury House Surgery and may be shared with other organisations involved in your care, such as NHS hospitals, community services, Primary Care Networks (PCNs), and Integrated Care Boards (ICBs).

Information is shared only where there is a lawful basis, and primarily for your direct care.

Information we hold about you

We may hold:

• Personal data – such as your name, address, date of birth and NHS number
• Special category data – including health information, ethnicity, and sexual orientation

How we collect your information

We collect information when you:

• Register with the practice
• Attend appointments or consultations
• Contact us by phone, email, online services, or in writing
• Receive care from other NHS services who share information with us

Please let us know if your contact details change so we can keep our records accurate.

How we use your information

We use your information to:

• Provide medical care, treatment, and referrals
• Arrange tests, prescriptions, and follow-up care
• Contact you about appointments, results, and questionnaires related to your care
• Meet legal and regulatory obligations (e.g. safeguarding, public health)
• Improve and monitor the quality of services we provide

We do not use automated decision-making or profiling.

Staff access to your information

Only authorised staff who need access to your information to do their job (such as clinicians or reception staff) can view your records. All staff are trained in confidentiality and data protection.

If a data breach occurs that affects your information, we will inform you.

Sharing your information

Your information may be shared:

• For your direct care with NHS organisations and healthcare professionals
• Where required by law
• For health planning, audit, and research purposes using pseudonymised or anonymised data, unless you have opted out

We do not share identifiable information unless there is a lawful basis to do so.

National data opt-out and research

Your GP record may be used to support NHS planning and research. You can choose to opt out of this by registering a Type 1 Opt-out or a National Data Opt-out.

Opting out will not affect your direct care.

More information is available on the NHS website

Summary care record (SCR)

Unless you choose otherwise, you will have a Summary Care Record. This helps healthcare professionals outside the practice provide safe care, especially in emergencies.

You can change your SCR preferences at any time.

Telephone recordings and digital consultations

• Telephone calls may be recorded for training and monitoring
• Video consultations are not recorded; clinical notes are entered into your medical record
• Clinicians may use transcription tools during consultations. You may decline this if you wish

CCTV

CCTV is used on our premises for the safety and security of patients, staff, and property.

How long we keep your information

We keep records in line with the NHS Records Management Code of Practice. Information is stored securely in the UK or approved UK/EU data centres.

Your rights

You have rights under UK GDPR, including the right to:

• Access your records (Subject Access Request)
• Request corrections
• Object to certain types of data processing

Some rights may be limited where exemptions apply for healthcare.

Accessing your records (DSAR)

• Requests should be made to the practice
• There is no charge
• We respond within one month
• We may need proof of identity

We use approved processors to help manage requests securely where appropriate.

Questions or complaints

If you have questions about how we use your information or wish to exercise your rights, please contact the Practice Manager.

If you are unhappy with how your information has been handled, you can complain to the Information Commissioner’s Office (ICO)

Changes to this notice

This notice is reviewed regularly and updated when necessary.