Privacy Notice

GDPR Privacy Notice v3.2 Decmeber 2023

COVID19 Privacy Notice v6 August 2023

National Data Sharing Arrangement-Direct Care APIs

PPG Privacy Notice 1 July 2023

How we use your information - GDPR

Data Protection Impact Assessment - March 2020

Data Protection Impact Assessment - December 2020


NHS Diabetes Prevention Programme - Privacy Notice

The practice shares data on eligible patients with the NHS Diabetes Prevention Programme, a joint initiative between NHS England, Public Health England and Diabetes UK.  This service is provided by Ingeus, who ensure they adopt enhanced security requirements in line with national standards. The purpose of the programme is to deliver behavioural and lifestyle intervention services for people who have already been identified with non-diabetic hyperglycaemia, and who are therefore at high risk of developing Type 2 Diabetes.  The legal basis that allows the practice to do this is direct care as detailed under articles 6 and 9 of the DPA18/GDPR as follows:

Article 6

- 6(1)(e) processing is necessary for the performance of a task carried out in the public interestor in the exercise of official authority vested in the controller.

Article 9

- 9(2)(h) – Processing is necessary for the purposes of preventative or occupational medicine, for assessing the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or management of health or social care systemsand services on the basis of Union or Member State law or a contract with a health professional.

IQVIA Medical Research Extraction Scheme

Call 111 when you need medical help fast but it’s not a 999 emergencyNHS ChoicesThis site is brought to you by My Surgery Website