Privacy policy

How we collect, use, and protect your personal information.

Important

Turn on your NHS App notifications so you don't miss screening invitations, test results, or prescription updates. Find out more about the NHS App.

This privacy notice covers Kiltearn Medical Centre as a data controller. It explains what information we hold about you, why we hold it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What information we hold

We hold the following types of personal data:

  • Basic details: name, address, date of birth, NHS number, next of kin
  • Contact records: visits, phone calls, online requests, prescriptions, referrals
  • Clinical information: diagnoses, test results, scans, vaccinations, allergies, mental health records
  • Correspondence: letters from hospitals, consultants, and other healthcare professionals

Why we hold it

Your records help us:

  • Provide safe, joined-up healthcare
  • Make sure other doctors and nurses involved in your care have the information they need
  • Audit and improve services
  • Meet our legal obligations under NHS contracts

The legal basis for processing your data is set out in Articles 6(1)(e) and 9(2)(h) of the UK GDPR. Healthcare providers can hold and process health data without your explicit consent because it's necessary for your care.

Who we share it with

We may share your information with:

  • Hospital consultants and other doctors involved in your care
  • Community nurses, midwives, mental health teams, and pharmacists
  • Out-of-hours services such as NHS 111 and the GP out-of-hours service
  • The Cheshire and Merseyside Integrated Care Board for commissioning and audit
  • NHS Digital, the UK Health Security Agency (UKHSA), and Public Health bodies where there's a legal requirement

We won't share your information with family members without your consent.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

  • Access: request a copy of the information we hold about you (Subject Access Request)
  • Rectification: ask us to correct information that's wrong or incomplete
  • Restriction: ask us to limit how we use your data in certain circumstances
  • Object: object to certain types of processing, such as research or surveillance
  • Portability: receive your data in a portable format (only applies to data we process automatically)

To exercise any of these rights, contact the Practice Manager in writing by emailing kiltearn.reception@nhs.net. There's no charge for a Subject Access Request, and we'll respond within one calendar month.

National Data Opt-Out

The National Data Opt-Out lets you stop your confidential patient information being used for purposes beyond your direct care, such as research and planning.

You can set or change your opt-out on the NHS website. The opt-out applies across the whole of the NHS.

Complaints about how we use your data

If you're unhappy with how we've handled your personal information, please contact the Practice Manager first. If you're still unsatisfied, you can complain to the Information Commissioner's Office:

About this website

This website is run by Kiltearn Medical Centre. It's built and maintained on our behalf by Cheshire Cat Marketing, a web agency.

The website itself collects very little. Like most websites, our hosting records technical details such as your IP address and browser type. We use these only to keep the site running and secure. The lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR.

We only set optional cookies if you accept them. You can read more and change your choices on our cookies page.

If you fill in a form on this site, we use what you send us to deal with your request and nothing else. Forms are explained where they appear.

Important: Website queries only

The website team is not the practice. Please don't send medical information, prescription requests, or appointment queries about the website itself. For anything about your care, contact the practice using the details on our contact page.

Data protection documents

Our full data protection policies are published as web pages:

Scroll to Top