Privacy policy

Sherburn & Rillington GP Surgery Privacy Notice

We understand how important it is to keep your personal information safe and secure and we take this very seriously. We have taken steps to make sure your personal information is looked after in the best possible way and we review this regularly. Please read this Privacy Notice carefully, as it contains important information about how we use the personal and healthcare information we collect on your behalf.

Why We Are Providing this Privacy Notice

We are required to provide you with this Privacy Notice by Law. It explains how we use the personal and healthcare information we collect, store and hold about you. If you are unclear about how we process or use your personal and healthcare information, or you have any questions about this Privacy Notice or any other issue regarding your personal and healthcare information, then please do contact our Data Protection Officer (details in Privacy Notice).

NHS England has been directed by the government to establish and operate the OpenSAFELY COVID-19 Service and the OpenSAFELY Data Analytics

Service. These services provide a secure environment that supports research, clinical audit, service evaluation and health surveillance for COVID-19 and other purposes.

“Each GP practice remains the controller of its own GP patient data but is required to let approved users run queries on pseudonymised patient data. This means identifiers are removed and replaced with a pseudonym.”

“Only approved users are allowed to run these queries, and they will not be able to access information that directly or indirectly identifies individuals.”

“Patients who do not wish for their data to be used as part of this process can register a type 1 opt out with their GP.”

You can find additional information about OpenSAFELY at https://www.opensafely.org

The Law says:

• We must let you know why we collect personal and healthcare information about you;
• We must let you know how we use any personal and/or healthcare information we hold on you;
• We need to inform you in respect of what we do with it;
• We need to tell you about who we share it with or pass it on to and why; and
• We need to let you know how long we can keep it for.

If you have any concerns about how your information is managed by the GP practice, please see the process outlined below:

• Submit your complaint to the GP practice in the first instance.

• The practice will acknowledge your complaint within 30 days and will respond as promptly as possible.

• If you are not satisfied with the response, you must request a further review by the practice.

If you remain dissatisfied following this review, you have the right to escalate your complaint to the UK supervisory authority. Information Commissioner: Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 1231113 or 01625 545745