Riverside Health Centre is committed to protecting your personal information and ensuring that it is handled securely, confidentially, and in accordance with UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who Can Access Your Information?
Your health records and personal information may be accessed by:
- Healthcare professionals directly involved in your care and treatment.
- Authorised administrative staff who require access to perform their duties.
- NHS organisations and healthcare providers involved in your care where information sharing is necessary and lawful.
- External organisations where required by law, safeguarding obligations, court orders, or public health requirements.
All staff and contractors working on behalf of the practice are bound by strict duties of confidentiality.
Your Rights
You have the right to:
- Know how your personal information is used.
- Expect that information held about you is accurate, secure, and confidential.
- Request access to your medical records.
- Request correction of inaccurate information.
- Object to certain types of information processing where permitted by law.
- Make a complaint if you are concerned about how your information is being used.
Privacy Notice
Our Privacy Notice explains:
- What information we collect.
- How we use and share your information.
- The legal basis for processing your data.
- How long we retain information.
- Your rights under data protection legislation.
GDPR, Data Protection and Confidentiality
The practice complies with the requirements of UK GDPR and the Data Protection Act 2018. We ensure that personal information is processed fairly, lawfully, transparently, and securely.
Everyone working within the practice has a legal duty to keep information about you confidential. Information will only be shared when:
- It is necessary for your care.
- You have given consent where appropriate.
- There is a legal requirement or overriding public interest.
Freedom of Information
The Freedom of Information Act 2000 gives the public the right to request certain information held by public authorities. Information about the practice that is available under the Freedom of Information Act can be requested in writing.
Access to Medical Records
You have the right to request access to your medical records under data protection legislation.
Requests can be made in writing or by contacting the practice. Proof of identity may be required before records are released.
SMS Text Messages and Email Communication
The practice may use SMS text messages, email, and other electronic methods to:
- Send appointment reminders.
- Notify patients of test results where appropriate.
- Provide healthcare information and service updates.
While we take reasonable steps to protect your information, electronic communications cannot always be guaranteed as completely secure. Please ensure the practice has your current contact details and notify us of any changes.
National Data Opt-out
The NHS National Data Opt-out allows patients to choose whether their confidential patient information is used for research and planning purposes.
Your choice will not affect your individual care or treatment.
For more information or to register your opt-out preference, visit:
www.nhs.uk/your-nhs-data-matters