1. Introduction

This Privacy Notice explains how we use your personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and NHS information governance requirements. We are committed to protecting your privacy and ensuring your information is used lawfully, fairly, and transparently.

2. Data Controller

Parkfield Medical Centre Address: 10 Parkfield Drive, Castle Bromwich, Birmingham B36 9EJ Telephone: 0121 749 5757 Email: parkfields.medicalcentre@nhs.net

We are responsible for the personal information we hold about you.

3. Data Protection Officer

Our Data Protection Officer (DPO) is:  Paul Couldrey of PCIG Consulting Limited.  Any queries regarding Data Protection issues hould be addressed to him at:

Email: Couldrey@me.com

Postal: PCIG Consulting Limited, 7 Westacre Drive, Quarry Bank, Dudley, West Midlands DY5 2EE

4. What Information We Collect

We collect information including:

• Personal details (name, address, date of birth, NHS number)

• Contact details

• Medical history and clinical records

• Medications, allergies, test results

• Safeguarding information

• Carer and next‑of‑kin details

• Information from other health and care providers

• Online service usage

• Communications sent via digital platforms (e.g., AccuRx, NHS App)

5. Why We Use Your Information

We use your information to:

• Provide direct patient care

• Make referrals to other services

• Prescribe medication

• Manage long‑term conditions

• Support safeguarding

• Provide online and digital services

• Participate in national screening programmes

• Support planning, audit, and commissioning

• Participate in ethically approved research

• Meet legal and regulatory obligations

6. Legal Basis for Processing

For direct care

• Article 6(1)(e) – Public task

• Article 9(2)(h) – Provision of health or social care

For research (where applicable)

• Article 6(1)(e) – Public task

• Article 9(2)(j) – Scientific research

For statutory requirements

• Article 6(1)(c) – Legal obligation

• Article 9(2)(i) – Public health

7. How We Share Your Information

We share information with:

• Hospitals and community services

• Mental health services

• Pharmacies

• NHS 111 and out‑of‑hours providers

• Local authorities (safeguarding)

• NHS England

• NHS Business Services Authority

• Screening programmes

• Research organisations (approved only)

• Digital service providers

Digital processors we use include (but are not limited to):

• AccuRx – for secure messaging, video consultations, document sharing, and patient questionnaires

• TPP – clinical system providers

• NHS App / NHS Login services

We only share the minimum necessary information.

8. Shared Care Records – Your Care Connected

We participate in Your Care Connected, the Birmingham & Solihull shared care record. This allows authorised clinicians across the region to view relevant information to support your care.

More information: https://www.yourcareconnected.org.uk (yourcareconnected.org.uk in Bing)

9. National Data Opt‑Out – Your Data Matters

You can choose whether your confidential patient information is used for research and planning.

Manage your choice: https://www.nhs.uk/your-nhs-data-matters (nhs.uk in Bing)

We comply with the National Data Opt‑Out.

10. Research – Research Active Practice

We are a research‑active practice. You may be invited to take part in ethically approved studies. Participation is voluntary and will not affect your care.

Where identifiable data is required, we will seek your consent unless a legal exemption applies.

11. Digitisation of Medical Records

As part of the NHS England Digitisation of Medical Records Programme, we may digitise your paper Lloyd George records.

Digitised records are stored securely within our clinical system. Paper records are securely destroyed in line with NHS retention schedules.

12. Patient Participation Group (PPG) Privacy Notice

If you join our PPG, we will process your:

• Name

• Contact details

• Communication preferences

This information is used solely for PPG activities and is not linked to your clinical record.

You may withdraw at any time.

13. How Long We Keep Your Information

We follow the NHS Records Management Code of Practice. Most GP records are kept for the lifetime of the patient plus 10 years.

14. Your Rights

You have the right to:

• Access your information

• Request correction

• Request deletion (in limited circumstances)

• Object to processing

• Request restriction

• Data portability

• Complain to the ICO

15. Accessing Your Records

You can access your records via:

• The NHS App

• A written request

• A Subject Access Request (SAR)

We respond within one month.

16. Complaints

If you have concerns about how we use your information, please contact:

Practice Manager parkfields.medicalcentre@nhs.net

You may also contact the Information Commissioner’s Office: https://ico.org.uk

17. Updates

We review this Privacy Notice regularly.