Privacy policy
Primary Care Xtra Limited t/a Primary Care Support
Privacy Policy
Our contact details
Name: Lauren Miller
Address: Unit 1 Waterside Court St Helens Technology Park WA9 1UA
E-mail: enquiries@primarycaresupport.net
Policy completed 19th July 2022
The type of personal information we access
We do not as an organisation collect personal data. We have access to personal data from your GP practice, with their agreement as Data Processors. We use the IT systems of your GP practice to provide care, all the data for which is stored only on the GP IT system. We access and/or process, but do not store:
Personal identifiers, contacts and characteristics (for example, name and contact details) and medical information relevant to patient care at the GP practice.
We are commissioned as a Data Processor by the GP practice.
We access or process personal data in accordance with the instructions of the Controller (GP Practice) based on a contract called a ‘Data Processing Agreement’.
How we access and/or process the personal information and why we do so
All of the personal information we access and/or process is provided to us directly by the GP Practice for the following reasons:
· To help support patient care at the GP Practice in providing health care to the patient, such as reviewing medication, coding of medical conditions and signposting patients to the most appropriate health care or social care professional.
We use the information that we have access to in order to support the GP practice in providing primary health care to its patients.
We do not share this information with any organisation or individual, it remains only with the GP practice as the Data Controller.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Patient consent. Patients are able to remove your consent at any time. They can do this by contacting us at the address at the head of this document or by contacting your GP Practice.
(b) We have a contractual obligation.
We do not store personal information
Patient information is securely stored on accredited NHS servers, accessed by Primary Care Plus employees and the GP Practice to assist in primary medical care.
The patient’s data protection rights
Under data protection law, patients have rights including:
Right of access - Patients have the right to ask their GP practice for copies of their personal information.
Right to rectification - Patients have the right to ask their GP practice to rectify personal information they think is inaccurate. They also have the right to ask them to complete information they think is incomplete.
Right to erasure - Patients have the right to ask their GP practice to erase their personal information in certain circumstances.
Right to restriction of processing – Patients have the right to ask their GP practice to restrict the processing of their personal information in certain circumstances.
Right to object to processing - Patients have the the right to object to the processing of their personal information in certain circumstances.
Right to data portability - Patients have the right to ask that their GP practice transfer the personal information you gave us to another organisation, or to them, in certain circumstances.
They are not required to pay any charge for exercising your rights. If the patient makes a request, the GP practice has one month to respond to you.
How to complain
If you have any concerns about our use of your personal information, you can make a complaint to us at:
Unit 1 Waterside Court St Helens Technology Park WA9 1UA or on:
01744 903703 or at:
enquiries@primarycaresupport.net
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
