Privacy Policy

The following polices outline how Riverside Health Partnership use your information.

GDPR Data Protection & Confidentiality Policy

Our full Data Protection and Confidentiality Policy can be downloaded below here.


Privacy Notice & Privacy Notice for Children & Young Adults

This privacy notice lets you know what happens to any personal data that you give to us, or any that we may collect from or about you. This notice applies to personal information processed by or on behalf of the practice.

Privacy Notice Privacy Notice for Children & Young Adults

Access to Medical Records

You have the right to ask for a copy of all records about you.

  • Your request should be made to the practice holding your information
  • We are required to respond to you within one Month
  • You will need to give adequate information (for example full name, address, date of birth NHS number etc.)

Click to download the Patient Access to Medical Records Request Form.



The practice is dedicated to ensuring that the principles and duties of safeguarding adults and children are holistically, consistently and conscientiously applied for the wellbeing of all. Our legal basis for processing For the General Data Protection Regulation (GDPR) purposes is: Article 6(1)(e) ‘…exercise of official authority…’.

For the processing of special categories data, the basis is: Article 9(2)(b) – ‘processing in necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law..’

General Practice / National Data Planning & Research

The data held in your GP medical records is shared with other healthcare professionals for the purposes of your individual care. It is also shared with other organisations to support health and care planning and research. It is important that the NHS can use this information to plan and improve services for all patients. All data that is collected and shared is protected by strict rules around privacy, confidentiality and security.

The NHS will never sell patient data or share it with insurance or marketing companies.

You have a choice. If you are happy for your information to be used in this way you do not have to do anything. There are two levels of data sharing of your information.

Type 1 Opt-Out Form

Type 1: General Practice Data for Planning & Research (GPDPR). More Information can be found here.

If you do not want your personally identifiable patient data to be shared outside of your GP practice for purposes except your own care, you can register an opt-out with your GP practice. This is known as a Type 1 Opt-out. We recommend you read the full Privacy Notice first before making a decision. However, if you still wish to Opt-Out, please download the form and hand this into reception. You can use this form to register a Type 1 Opt-out for yourself or for a dependent (as long as you are the parent or legal guardian). You can also use this form to withdraw an existing Type 1 Opt Out.

Type 2 Opt-Out

Type 2: National Data Planning & Research. More information can be found here.

Information at NHS Digital which does not reveal your identity can then also be used by others, such as researchers and those planning health services, to make sure we provide the best care possible for everyone. GP practices are no longer able manage this type of opt-out. Please click the button to opt out.

Taking the decision to opt-out will not affect individual care and you can change your choice at any time.

Alert: Online Consultation (Anima)

You can now submit a medical request through our online consultation system Anima, to log in or create an account Please Click Here