Privacy Notice & GDPR

The Good Practice complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which have been applicable in the UK since 25 May 2018. Our compliance is outlined in this Privacy Notice. The following information provides an overview of how we collect, use, and protect your personal data.

Data Protection Officer / Contact Details

If you have any questions about this Privacy Notice or how your data is handled, please contact:

The Good Practice

Unit 27B Battlers Green Farm

Radlett

WD7 8PH

Tel: 01923 850999

Email: admin@tgphealth.com

What Personal Data Do We Hold?

To provide you with a high standard of healthcare, we hold personal information including:

• Your past and current medical conditions

• Personal details such as your age, NHS number (where applicable), address, telephone number, and details of your GP

• Clinical records including test results, scans, and photographs where relevant

• Information about treatments provided or proposed, including associated costs

• Notes of consultations and communications regarding your care

• Records of consent to treatment

• Correspondence with other healthcare professionals involved in your care

Why Do We Hold Information About You?

We maintain accurate and comprehensive patient records to ensure safe, effective, and appropriate medical care.

We encourage patients to share relevant medical information (such as test results or specialist letters) to ensure continuity and quality of care. Failure to provide relevant information may impact our ability to treat you effectively.

Retention of Information

We retain patient records:

• For as long as you are registered with the practice, and

• For at least 11 years after you cease to be a patient, or

• For children, until age 25 (or longer where required)

In some circumstances, records may be retained longer in accordance with legal and medical guidelines.

All data is stored securely using appropriate technical and organisational safeguards.

Security of Information

Your personal data is stored securely in electronic and/or manual systems.

• Access is restricted to authorised staff only

• Systems are protected with secure audit trails

• Data is routinely backed up

• We implement appropriate security measures to prevent unauthorised access, loss, or misuse

Disclosure of Information

To provide safe and effective care, we may share your information with:

• Your NHS or private GP (where relevant)

• Hospitals, laboratories, and other healthcare providers

• Other professionals involved in your care

• Regulatory authorities where required by law

• HM Revenue & Customs or other government bodies where legally required

• Private healthcare schemes or insurers (where applicable)

Information is only shared on a strict need-to-know basis, and only the minimum necessary data is disclosed.

In rare circumstances, we may be required by law or court order to disclose information to third parties not directly involved in your care.

Your Rights Under Data Protection Law

Under UK GDPR, you have the right to:

• Be informed about how your data is used

• Access your personal data (Subject Access Request)

• Request correction of inaccurate or incomplete data

• Request erasure (where applicable)

• Restrict processing

• Request data portability

• Object to processing

• Rights relating to automated decision-making and profiling

To request access to your data, please submit a Subject Access Request (SAR) in writing. We will respond within one calendar month. In most cases, this service is free of charge.

Objection to Processing

If you object to how your personal data is used or shared, please discuss this with your GP or the practice team.

Please note that restricting data use may affect our ability to provide safe and effective care.

Privacy Information for Children

We are committed to protecting children’s data. Information can be provided in a format suitable for younger patients upon request.

Complaints

If you have concerns about how your data is handled, please contact us in the first instance using the details above.

If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Telephone: 0303 123 1113

Website: https://ico.org.uk/

CCTV

Please note that CCTV is in operation on our premises for security purposes. Recording is carried out in accordance with data protection laws. Further information is available on request.

Changes to This Privacy Notice

The Good Practice reserves the right to update this Privacy Notice from time to time. Updates will be made available upon request or via our website.