Your Practice Takes Your Privacy Very Seriously
This page describes our transparency and privacy notice which includes a list of our sharing partners who are also required to take your privacy equally seriously.
 

Privacy / Transparency Notice
In response to receiving a completed Processing Activities Log which Upwell Health Centre has confirmed is an accurate and complete record of processing carried out by the Practice, the following Privacy / Transparency Notice has been drafted.

It is intended to satisfy all the requirements for privacy notices listed by the Information Commissioner as set out below.

 


What information must be supplied?
Data obtained directly from data subject Data obtained from a third party or sharing partner

Identity and contact details of the controller (and, where applicable, the controllers representative) and the data protection officer

YES

YES

Purpose of the processing and the lawful basis for the processing

YES

YES

The legitimate interests of the controller or third party, where applicable

YES

YES

Categories of personal data
 
YES

Any recipient or categories of recipients of the personal data

YES

YES

Details of transfers to third country and safeguards

YES

YES

Retention period or criteria used to determine the retention period

YES

YES

The existence of each of data subjects rights

YES

YES

The right to withdraw consent at any time, where relevant

YES

YES

The right to lodge a complaint with a supervisory authority

YES

YES

The source the personal data originates from and whether it came from publicly accessible sources
 
YES

Whether the provision of personal data part of a statutory or contractual requirement or obligation and possible consequences of failing to provide the personal data

YES
 

The existence of automated decision making, including profiling and information about how decisions are made, the significance and the consequences.

YES

YES



Upwell Health Centre and Your Information

Upwell Health Centre takes your privacy very seriously. We are registered with the Information Commissioner's Office as a Data Controller, our registration number is:
Z6132652
 
If you have any questions or wish to make a request in relation to your information, please contact us at;

Upwell Health Centre
Townley Close
Upwell
WISBECH
Cambs    PE14 9BT
OR         
Emma.cooper35@nhs.net
 
Upwell Health Centre aims to provide you with the highest quality health care. To do this we must keep records about you, your health and the care we have provided or plan to provide to you.

Your doctor and other health professionals caring for you, such as nurses or physiotherapists, keep records about your health and treatment so that they are able to provide you with the best possible care. These records are called your health care record and may be stored in paper form or on computer and electronic systems and may include Personal Data:

  • basic details about you, such as address, date of birth, NHS number, and next of kin as well as Sensitive Personal Data
  • contact we have had with you, such as clinical visits
  • notes and reports about your health
  • details and records about your treatment and care
  • results of x-rays, laboratory tests, etc.
Healthcare providers are permitted to collect, store, use and share this information under Data Protection Legislation which has a specific section related to healthcare information.
 
What do we do with your information?
  • Refer you to other healthcare providers when you need other services or tests
  • Share samples with laboratories for testing (ie: blood samples)
  • Share test results with hospitals or community services (ie: blood test results)
  • Allow out of hours or extended hours GPs to look at your health record when you are going to an appointment
  • Send prescriptions to a pharmacy
  • Text patients in relation to healthcare services
  • Samples are provided to the courier for delivery to pathology
  • Share reports with the coroner
  • Receive reports of appointments you  have attended elsewhere such as with the community nurse or if you have had a stay in hospital
  • Produce medical reports on request from third parties such as the DVLA or your employer
  • Movement of patient records to Primary Care Support England
    • Follow Appendix A to see a list of the partners that we usually share with.
 
What else do we do with your information?
Along with activities related directly to your care, we use information in ways which allow us to check that care is safe and provide data for the improvement and planning of services.
  • Quality / payment / performance reports are provided to service commissioners
  • As part of clinical research, information that identifies you will be removed unless you have consented to being identified
  • Undertaking clinical audits within the Practice
  • Supporting staff training
  • Incident and complaint management
 
CCTV
CCTV is in place at our Practice. The cameras are located in the main entrance area, the Reception desk area, externally on the front left of the building (as you face it), and externally on each of the rear corners of the building covering both car parks and staff access points. It has been installed solely for the safety and security of our patients and staff, to prevent and deter crime.
 
Images are recorded 24 hours a day and stored on the hard drives of the recording devices that are situated in secure areas and only the Practice managers and those delivering technical support services will have access to the system.
 
The CCTV only records images and does not record audio.
 
All CCTV recordings are stored on our recording devices for 30 days before being deleted.
There are signs in the Practice telling you that CCTV is in place.
We will only ever share information with the relevant authorities in connection with the safety and security of patients and staff and will not share with any other third parties.
Visitors to the Practice have the right to request to see images of themselves on CCTV as part of a request made under the privacy legislation. Like all subject access requests, it should be made in writing.
We have followed the CCTV guidelines produced by the Information Commissioners Office.
 
Sharing when Required by Law
Sometimes we will be required by law to share your information and will not always be able to discuss this with you directly. Examples might be for the purposes of detection or prevention of crime, where it is in the wider public interest, to safeguard children or vulnerable adults, reporting infectious diseases or where required by court order.


Care Quality Commission Access to Health Records
The CQC has powers under the Health and Social Care Act 2008 to access and use your health information, where it is necessary, to carry out their functions as a regulator.
This means that inspectors may ask to look at certain records to decide whether we are providing safe, good quality care.
More information about the CQC can be obtained on their website https://www.cqc.org.uk/about-us/our-policies/privacy-statement

 

Information Access and Rights
Data protection law provides you with a number of rights that the Practice is committed to supporting you with:
 
Right to Access
You have the right to obtain:

  • confirmation that your information is being used, stored or shared by the Practice
  • a copy of information held about you
We will respond to your request within one month of receipt or will tell you when it might take longer.
We are required to validate your identity including the identity of someone making a request on your behalf
 
Right to Object or Withdraw Consent
We mainly use, store and share your information because we are permitted in order to deliver your healthcare but you do have a right to object to us doing this.
Where we are using, storing and sharing your information based on explicit consent you have provided, you have a right to withdraw that consent at any time.
Our Data Protection Officer will be happy to speak with you about any concerns you have.
 
Right to Correction
If information about you is incorrect, you are entitled to request that we correct it.
There may be occasions where we are required by law to maintain the original information; our Data Protection Officer will talk to you about this and you may request that the information is not used during this time
We will respond to your request within one month of receipt or will tell you when it might take longer.
 
Complaints
You also have the right to make complaints and request investigations into the way your information is used. Please contact our Data Protection Officer or visit this link for more information. https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/
 
Case Finding
Sometimes your information will be used to identify whether you need particular support from us.
Those involved in your care might look at particular indicators (such as particular conditions) and contact you or take action for healthcare purposes. For example, this might be to prevent you from having to visit Accident and Emergency by supporting you in your own home or in the community.
We will use automated technology to help us to identify people that might require support but ultimately, the decision about how or whether to provide extra support is made by those involved in your care.
Our Data Protection Officer will be happy to speak to you about this if you have concerns or objections.


Our Practice uses West Norfolk Health to support us to deliver some of our services, such as providing appointments when our practice is closed or community based services.
Here - www.westnorfolkhealth.co.uk - is some more information about who they are and what they do.


 Information Technology
The Practice will use third parties to provide services that involve your information such as:

  • removal and destruction of confidential waste
  • provision of clinical systems
  • provision of connectively and servers
  • digital dictation services 
Data analytics or warehousing (these allow us to make decisions about care or see how effectively the Practice is run, personal data will never be sold or made available to organisations not related to your care delivery)
We have contracts in place with these third parties that prevent them from using it in any other way than instructed. These contracts also require them to maintain good standards of security to ensure your confidentiality.
Please visit Appendix A to find out more about our sharing partners and providers.
 
How do we Protect your Information?
We are committed to ensuring the security and confidentiality of your information. There are a number of ways we do this:
Staff receive annual training about protecting and using personal data
Policies are in place for staff to follow and are regularly reviewed
We check that only the minimum amount of data is shared or accessed
We use smartcards to access systems, this helps to ensure that the right people are accessing data - people with a need to know
We use encrypted emails and storage which would make it difficult for someone to intercept your information
We report and manage incidents to make sure we learn from them and improve
We put in place contracts that require providers and suppliers to protect your data as well
We do not send your data outside of the EEA
 
How Long Do We Keep Your Information?

In line with the Department of Health Code, we will retain / store your health record for your lifetime. When a patient dies, we will review the record and generally it will be destroyed 10 years later, unless there is a reason to keep it for longer.
If you move away or register with another practice, we will send your records to the new practice.

 

 

Appendix A
Routine Sharing Partners for Upwell Health Centre and 
Welle Ltd Pharmacy
12 September 2018

Sharing Partner Processing Activities Website link to sharing partner
ACES (Ophthalmology) Referrals & Test Results http://www.aces-eyeclinic.co.uk/
Addenbrookes Hospital Referrals & Test Results https://www.cuh.nhs.uk/addenbrookes-hospital
ADT Fire and Security CCTV https://www.adt.co.uk/
Alphamed Pharmacy Services www.amcaregroup.co.uk/alphamed/
Anglia Health Protection Team Infectious Disease Reporting https://www.gov.uk/guidance/contacts-phe-health-protection-teams
Arden and Greater East Midlands Commissioning Support Unit Provision of IT Systems & Support ITServiceDesk@ardengemcsu.nhs.uk
Asda Pharmacy Pharmacy Services https://storelocator.asda.com/store/wisbech
BCA Direct Pharmacy Services http://www.amcaregroup.co.uk/
BMI Sandringham Hospital Referrals & Test Results www.bmihealthcare.co.uk/hospitals/bmi-the-sandringham-hospital
BOC Healthcare Referrals & Test Results http://www.bochealthcare.co.uk
Boots Wisbech Pharmacy Services https://www.boots.com/stores/182-wisbech-horse-fair-pe13-1ar
Bourn Hall Clinic Referrals & Test Results https://www.bournhall.co.uk
C. S. Bullen Stomacare Pharmacy Services http://www.bullens.com
Cambridgeshire Coroner Coroner Repots https://www.cambridgeshire.gov.uk › Residents › Births, deaths and marriages › Deaths
Charter Ltd Pharmacy Services https://www.charter.co.uk/
Children’s Services Referrals & Test Results https://www.norfolk.gov.uk/children-and-families
City Sprint Medical notes transport https://www.citysprint.co.uk/
ERS Medical Pathology Courier www.ersmedical.co.uk
Fenland Study Research http://www.mrc-epid.cam.ac.uk/research/studies/fenland/
Fittleworth Pharmacy Services https://www.fittleworth.com
Fitzwilliam  Hospital Referrals & Test Results https://www.fitzwilliamhospital.co.uk
Fresenius Homecare Pharmacy Services www.freseniusmedicalcare.co.uk/
Great Ormond Street Referrals & Test Results www.gosh.nhs.uk/
Guy's &
St Thomas’
Referrals & Test Results https://www.guysandstthomas.nhs.uk/Home.aspx
Health Intelligence Referrals & Test Results https://health-intelligence.com
Hinchingbrooke Hospital Referrals & Test Results https://www.nwangliaft.nhs.uk/our-hospitals/hinchingbrooke-hospital/
IC24 Out of Hours Provider http://www.ic24.org.uk
iCash Referrals & Test Results https://www.icash.nhs.uk/
Ipswich Hospital Referrals & Test Results http://www.wsh.nhs.uk/Home.aspx
Jade Euro Med Ltd. Pharmacy Services http://www.jade-euro-med.co.uk
Johnson Community Hospital Referrals & Test Results https://www.lincolnshirecommunityhealthservices.nhs.uk/.../community-hospitals/john..
Lloyds Cardnet Credit & Debit card processing https://lloydsbankcardnet.com/
Luton & Dunstable University Hospital Referrals & Test Results https://www.ldh.nhs.uk/
Macmillan Referrals & Test Results https://www.macmillan.org.uk/fundraising/inyourarea/england/norfolk/norfolk.asp
NCHC Referrals & Test Results www.norfolkcommunityhealthandcare.nhs.uk/
NEST Pensions Staff pension Information https://www.nestpensions.org.uk/schemeweb/nest.html
NHS Business Services Authority Staff pension Information https://www.nhsbsa.nhs.uk/nhs-pensions
NHS England Commissioner Reports https://www.england.nhs.uk
Norfolk and Norwich Hospital Referrals & Test Results http://www.nnuh.nhs.uk/
Norfolk Coroners Coroner Repots https://www.norfolk.gov.uk/births-ceremonies-and-deaths/deaths/the-coroner
Norfolk County Council Commissioner Reports https://www.norfolk.gov.uk/
Norfolk Family Solutions Referrals & Test Results https://csapps.norfolk.gov.uk/csshared/ecourier2/getfile.asp?id=6505
NWOS Pharmacy Services www.nwossurgical.co.uk/about.html
Papworth Hospital Referrals & Test Results www.royalpapworth.nhs.uk
PCRN Research http://www.invo.org.uk
Peterborough City Hospital Referrals & Test Results ttps://www.nwangliaft.nhs.uk/our-hospitals/peterborough-city-hospital/
Pharmacy 2U Pharmacy Services https://www.pharmacy2u.co.uk/
Point 1 Referrals & Test Results https://www.norfolk.gov.uk/children-and-families/send-local-offer/.../point-1
Princess of Wales Hospital Referrals & Test Results www.cambscommunityservices.nhs.uk/contact-find.../princess-of-wales-hospital-ely
Queen Elizabeth Hospital Kings Lynn Referrals & Test Results http://www.qehkl.nhs.uk
Rosie Hospital Referrals & Test Results https://www.cuh.nhs.uk/rosie-hospital
Salts Healthcare Pharmacy Services http://www.salts.co.uk
Shred It Confidential Waste Removal https://www.shredit.co.uk/en-gb/home
Social Services Referrals & Test Results https://www.norfolk.gov.uk/what-we-do-and-how-we.../adult-social-services
Some enhanced services (ie health checks and substance mis-use) Referrals & Test Results https://www.norfolk.gov.uk/
TPP System One Clinical system provider https://www.tpp-uk.com/
Wellbeing Service Referrals & Test Results www.nsft.nhs.uk/Our-services/Pages/Wellbeing-Services.aspx
Welle Ltd. Paper Prescriptions www.upwellhealthcentre.nhs.uk
West Norfolk CCG Commissioner Reports http://www.westnorfolkccg.nhs.uk/
West Norfolk Health GP, Improved Access and Out of Hours Provider https://www.westnorfolkhealth.co.uk/
West Suffolk Hospital Referrals & Test Results http://www.ipswichhospital.nhs.uk/
  GP and
Improved Access
https://www.westnorfolkhealth.co.uk/

 

print this page