GDPR Privacy Information Notice for Patients

Beacon Medical Practice is committed to protecting your privacy and ensuring your personal information is handled safely, securely and lawfully. This Privacy Information Notice explains how we use your data, why we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Beacon Medical Practice is a GP surgery providing NHS primary care services across our three sites.

We are registered with the Information Commissioner’s Office (ICO) as a data controller responsible for the processing of patient information.

What Information We Collect

We hold personal and confidential information about you to ensure you receive safe, effective and high‑quality care. This may include:

  • Personal details (name, address, date of birth, contact information)
  • NHS number
  • Medical history and clinical records
  • Medications, allergies and treatment plans
  • Consultation notes and referrals
  • Test results and investigations
  • Information from other health or social care providers
  • Emergency contact details
  • Safeguarding information, where relevant

This information forms your medical record, which may be held electronically, on paper, or both.

Why We Collect and Use Your Information

We process your information to:

  • Provide safe, effective and personalised healthcare
  • Support diagnosis, treatment and clinical decision‑making
  • Coordinate care with other NHS and social care providers
  • Arrange referrals, prescriptions and investigations
  • Manage appointments and communication with you
  • Ensure quality, safety and regulatory compliance
  • Support health planning, audit and service improvement

Our lawful bases for processing include direct care, legal obligation, public interest, and legitimate interest, depending on the activity.

How We Store and Protect Your Information

Your information is stored securely using both electronic systems and paper records. We use strict access controls, secure networks, encryption and confidentiality procedures to protect your data from loss, misuse or unauthorised access.

Only staff who are directly involved in your care or essential administrative processes can access your information.

Sharing Your Information

We may share your information with authorised organisations involved in your care, such as:

  • NHS hospitals and specialist services
  • Community nursing teams
  • Mental health services
  • Social care providers
  • Pharmacies
  • Diagnostic and screening services

We may also share information when required by law, for example:

  • Court orders
  • Public health protection
  • Statutory reporting
  • Regulatory inspections (e.g., CQC under the Health and Social Care Act 2008)

We will never share your information with family, friends or third parties without your explicit consent, unless legally required.

Your Rights Under UK GDPR

You have the right to:

  • Access your medical records
  • Request corrections to inaccurate information
  • Request restrictions on how your data is used
  • Object to certain types of processing
  • Request deletion, where legally applicable
  • Be informed about how your data is used

To request access to your records, you must make a written request. You can:

  • Email: [email protected]
  • Or collect and return a form from any of our three practice sites

Digital Access & Online Services

Your information may be used to support secure access to digital NHS services, including:

  • NHS App
  • SystmOnline
  • Online consultations and digital triage

If you need help installing or using these services, our Reception team can support you with:

  • Setting up accounts
  • Verifying your identity
  • Installing apps on your own device (BYOD)
  • Troubleshooting login or access issues

Us

If you have questions about how your information is used, or wish to exercise your rights, please contact:

The Practice Manager, Beacon Medical Practice by Email: [email protected] or Telephone: 01754 897000

Complaints and Further Advice

If you are unhappy with how we handle your data, you can contact the Information Commissioner’s Office (ICO).

ICO website: www.ico.org.uk Telephone: 0303 123 1113

Date published: 29th June, 2022
Date last updated: 3rd July, 2026