Privacy Notice

Introduction

Audley Medical Practice is committed to protecting your personal information and respecting your privacy. This notice explains how we collect, use, store and share your information in line with the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR).

What is a Privacy Notice?

A privacy notice explains how we use the information we hold about you. This includes personal details such as your name, address, date of birth and your medical records.

Why do we have a Privacy Notice?

By law, we must inform you about how your information is handled. The UK GDPR ensures that your data is:

• Kept secure
• Used fairly and lawfully
• Only shared when necessary

What Information Do We Collect?

We may collect and hold the following information:

• Personal details (name, address, date of birth)
• Contact details (phone/email)
• Information about parents or guardians (where relevant)
• Medical records and history
• Appointment details
• Treatments and medications
• Any other information necessary for your care

How Do We Use Your Information?

We use your information to:

• Provide you with safe and effective care
• Manage appointments and services
• Communicate with other healthcare professionals involved in your care

We may share your information with:

• Hospitals or specialist services
• Other healthcare providers

We only share information with organisations such as the police, courts or social services where there is a lawful reason to do so.

Lawful Basis for Using Your Information

We must have a valid legal reason (known as a lawful basis) to use your data. Because health information is highly sensitive, it is protected under strict legal rules to ensure it is only used appropriately.

How Do We Keep Your Information Safe?

We take your privacy seriously and use:

• Secure computer systems
• Safe storage for paper records
• Staff training in data protection

We follow strict rules to ensure your information is always kept secure.

Use of Artificial Intelligence (AI)

We may use AI technology to support clinical care.

This may include:

• Helping clinicians document consultations
• Processing relevant healthcare information

Key points:

• A Data Protection Impact Assessment has been completed
• AI use complies with UK GDPR
• You can opt out of AI use during your consultation by informing your clinician

A separate AI privacy notice is available on request.

Who Can Access Your Information?

Your information is usually only accessed by staff within the practice.

It may also be shared with:

• Hospitals and other NHS services
• Organisations involved in your care

In limited circumstances, information may be shared:

• For medical research (with consent)
• Where required by law

Long-Term Conditions

If you have a long-term condition, sharing information with other healthcare professionals helps ensure you receive the right care when needed.

Your Rights

You have the right to:

• Access your records (via a Subject Access Request)
• Request corrections to inaccurate information
• Object to sharing your data
• Raise concerns or ask questions

Please note: We are legally required to keep accurate medical records, so information cannot usually be removed.

Children and Young People

• Parents or guardians can usually manage records for children under 16
• Young people aged 12+ may be able to access their own records if considered competent
• We encourage discussion with parents or carers where appropriate

How to Access Your Records

You can request access to your records by completing a Subject Access Request (SAR).
You may also be able to view your records online—please ask at reception for details.

Corrections to Your Records

If you believe any information we hold about you is incorrect, please contact us so we can review and correct it where appropriate.

Contact Us

If you have any questions about your data, please contact us:

•  Email: [email protected]
• Postal Address:
  Dr Richard Page
  Audley Medical Practice
  Church Street
  Audley
  Stoke-on-Trent
  ST7 8EW
• Speak to:
  • Practice Manager: Rebecca Winwood
  • Deputy: Kerry Wood

Our Data Protection Officer (DPO) is available to provide further advice.

Complaints

If you are unhappy with how your information is handled:

1. Contact the Practice Manager in the first instance
2. If unresolved, you can contact the Information Commissioner’s Office (ICO):

• 🌐 Visit the ICO website
• ☎️ Telephone: 0303 123 1113

Changes to This Privacy Notice

This privacy notice is regularly reviewed and updated to ensure it remains accurate and compliant with current legislation.