Privacy Notice for Slaidburn Country Practice
Introduction
At Slaidburn Country Practice, we are committed to protecting and respecting your privacy. This Privacy Notice outlines how we collect, use, disclose, and protect personal information about you, as well as your rights regarding your data. This policy is in line with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Who We Are
Slaidburn Country Practice is responsible for your personal data. We determine the purposes for which and the manner in which your personal data is processed.
What Information We Collect
To provide you with quality healthcare services, we may collect and process the following information:
- Personal details: Name, address, date of birth, gender, NHS number, and contact details
- Health and medical information: Medical history, treatment, medications, referrals, test results, and other health data
- Next of kin and emergency contact information
We may also collect certain information about your use of our website (e.g., cookies), if applicable, to help us understand how visitors interact with our site.
How We Use Your Information
We use your information for the following purposes:
- Provision of healthcare services: To manage and deliver the best possible care and treatment
- Patient records and continuity of care: Maintaining accurate records for ongoing and future care
- Administrative purposes: Including billing, managing appointments, and verifying identity
- Compliance with legal obligations: Sharing data with relevant authorities as required by law
- Improving healthcare services: Conducting audits, training, and research, with confidentiality measures in place
Sharing Your Information
We may share your information with:
- NHS agencies, other healthcare providers, and specialists involved in your care
- Our staff members who are bound by confidentiality agreements
- Third-party service providers who support us in delivering healthcare services
- Regulatory bodies and law enforcement, when legally required
We ensure that all third parties involved are bound by strict confidentiality and data protection obligations.
How We Store and Protect Your Information
We take all reasonable steps to protect your information. All data is stored securely on our systems, which are regularly monitored and updated to prevent unauthorised access or data breaches.
How Long We Keep Your Information
We retain your personal data only as long as is necessary to fulfil the purposes outlined in this notice and to comply with legal and regulatory requirements. When no longer required, data will be securely deleted or anonymised.
Your Rights
You have the following rights regarding your personal data:
- Right to access: Request a copy of your personal data held by us
- Right to rectification: Correct any inaccuracies in your data
- Right to erasure: Request deletion of your data in certain circumstances
- Right to restrict processing: Limit how your data is used in specific situations
- Right to data portability: Request that we transfer your data to another provider
- Right to object: Object to certain uses of your data, including direct marketing
- Right to withdraw consent: Where we rely on your consent to process your data
To exercise any of these rights, please contact us using the details below.
Contact Us
If you have any questions or concerns about this Privacy Notice or how we handle your personal data, please contact:
Data Protection Officer
Hayley Gidman
Head of Information Governance
NHS Midlands and Lancashire,
Leyland House,
Lancashire Enterprise Business Park,
Leyland,
Lancashire,
PR26 6TY
Email: mlcsu.dpo@nhs.net
Telephone: 01782 916 875
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are not satisfied with our response.
Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Any changes will be posted on our website and displayed at the practice. This notice was last updated on 14th November 2024.