Data Privacy Notice

This is a Data Privacy Notice for patients aged 13 and over at Wibsey & Queensbury Medical Practice. It outlines how the practice collects, uses, and shares your personal health data. Here's a summary of the key points:

Purpose of Collecting Your Information

The practice collects and stores personal information to provide the best possible care. This includes details like:

• Personal information (name, address, date of birth, etc.)

• Medications and allergies

• Health concerns and care plans

• Referrals, hospital admissions, and appointments

• Emergency contact details

• Any other relevant information from other care sources

This data is used to assess your needs and help decide the most appropriate treatment. It also helps the practice communicate with you (e.g., appointment reminders). Importantly, your information is not used for marketing purposes.

Data Control and Protection

• The Practice is the data controller for your personal information.

• All partners involved are required to maintain high standards of confidentiality and data protection.

• Data protection laws ensure your information is stored securely and used lawfully.

Lawful Basis for Using Your Information

• The practice needs a lawful reason to process your data. The primary basis is for providing your healthcare.

• Other lawful bases include:

  • Legal obligations (e.g., safeguarding)

  
  

  • Public interest (e.g., public health initiatives)

  
  

  • Consent (in some cases)

  
  
  

Access to Your Information

• Only authorised individuals involved in your care can access your personal data.

• Your information will help healthcare professionals make informed decisions about your care.

• If you give consent, some data may be shared with third parties, but only for direct care purposes.

Retention of Your Information

• Records are kept in line with NHS guidelines and legal requirements.

• Your data is retained for prescribed time spans depending on the type of information.

Sharing Your Information

• Your data may be shared with authorised parties involved in your care or if there is a legal duty (e.g., for safeguarding or a court order).

• In exceptional cases, your information may be shared with international bodies if required for ongoing care.

Your Data Protection Rights

Under the General Data Protection Regulation (GDPR), you have several rights:

• Right to be informed: You have the right to know what information is held and how it is used.

• Access: You can request access to your personal data.

• Rectification: You can correct any inaccurate data.

• Erasure: You can ask for your data to be deleted in certain situations.

• Restriction of processing: You can restrict how your data is used.

• Data portability: You can request your data in a transferable format.

• Right to object: You can object to how your data is processed.

If you believe any information is incorrect, you can contact the Data Protection Officer (DPO).

Complaints

• If you are not satisfied with how your data is handled, you can contact the Data Protection Officer or the healthcare provider responsible for your care.

• If you are still dissatisfied, you can file a complaint with the Information Commissioner's Office (ICO).

ICO Website

COVID-19 Research

A COPI notice has been issued for specific COVID-19 research activities. If you're interested in more details, the notice is available on the GOV.UK website.

Contact Information

If you have any questions or concerns regarding your data, please contact:

Daljeet Sharry-Khan
Data Protection Officer
Email: Daljeet.Sharry-Khan@bradford.nhs.uk