Practice Policies

You can be assured that anything you discuss with any member of the surgery staff, whether doctor, nurse or receptionist, will remain confidential. Even if you are under 16, nothing will be said to anyone, including parents, other family members, care workers or teachers, without your permission. The only reason why we might want to consider passing on confidential information without your permission would be to protect either you or someone else from serious harm. In this situation, we would always try to discuss this with you first.

If you have any worries or queries about confidentiality, please ask a member of staff.

If you would like to discuss matters of a confidential nature, either with our receptionists or a member of the dispensary team, we have a side room available in reception for this purpose.

 

In line with UK and EU law your practice is governed by GDPR (General Data Protection Regulation), this guarantees that the correct procedures are in place to ensure that your data is never shared with anybody who does not have good cause to view it. The practice has a 'Data Controller' who is responsible for the safety of your data. The practice will NEVER sell your data to a third party.

In order to provide the right level of care, we are required to hold personal information about you on our computer systems and in paper records to help us to look after your health needs, and your doctor is responsible for their accuracy and safe-keeping. Please help to keep your record up to date by informing us of any changes to your circumstances.

Confidentiality and Personal Information

Doctors and staff in the practice have access to your medical records to enable them to do their jobs. From time to time information may be shared with others involved in your care if it is necessary. Anyone with access to your record is properly trained in confidentiality issues and is governed by both legal and contractual duty to keep your details private.

All information about you is held securely and appropriate safeguards are in place to prevent accidental loss.

In some circumstances we may be required by law to release your details to statutory or other official bodies, for example if a court order is presented, or in the case of public health issues. In other circumstance you may be required to give written consent before information is released – such as for medical reports for insurance, solicitors etc.

To ensure your privacy, we will not disclose information over the telephone or fax unless we are sure that we are talking to you. Information will not be disclosed to family, friends or spouses unless we have prior written consent, and we do not, leave messages with others.

You have a right to see your records if you wish. The NHS APP is the easiest, fastest and most convenient way to see your records, otherwise please ask at reception. An appointment may be required. In some circumstances a fee may be payable.

We make every effort to make the surgery accessible for disabled patients. There is access through the main door and we have a wheelchair available for use in surgery.

Hearing Difficulties

If you are experiencing hearing difficulties when being called in to see the doctor or nurse, please do let us know in order for us to set up an alert on your medical records and personally collect you from the waiting room. Alternatively, we do have the facility of a portable induction loop. If you would like to use this, please ask at reception for assistance.

We will always respect your privacy, dignity and your religious and cultural beliefs particularly when intimate examinations are advisable - these will only be carried out with your express agreement and you will be offered a chaperone to attend the examination if you so wish.

You may also request a chaperone when making the appointment or on arrival at the surgery (please let the receptionist know) or at any time during the consultation.

Please be aware that the clinician may also insist upon a chaperone being present.

The following IT systems are in use at the practice:

  • Systmone Operating System. 
  • Welby Innovate (Used for medication monitoring and prescribing, annual review recalls and long term condition management. This works within NICE guidelines for improved patient safety) 
  • Accurx - (Triage System) 
  • Electronic Appointment Booking (the facility to book routine appointments online and, similarly, to cancel appointments
  • Online ordering of repeat prescriptions
  • Summary Care Record (uploading details of your current medication and allergies to the national “spine” so that these are available for doctors involved in your care elsewhere)
  • GP to GP transfers (the electronic transfer of records from practice to practice when you re-register
  • Patient Access to records (the facility to view your medical records online).

If you would like access to your medical records then please download and register with the NHS APP, or click the button on the right of the screen.

This practice is committed to preserving the security of data used by our information systems. This means that we will take all reasonable actions to;

Maintain the Confidentiality of all data within the practice by:

  • Ensuring that only authorised persons can gain access to our systems
  • Not disclosing information to anyone who has no right to see it

Maintain the integrity of all data within the practice by:

  • Taking care over input
  • Ensuring that all changes are reported and monitored
  • Checking that the correct record is on the screen before updating
  • Reporting all apparent errors and ensuring that they are resolved

Maintain the availability of all data by:

  • Ensuring that all equipment is protected from intruders
  • Ensuring that backups are taken at regular, predetermined intervals
  • Ensuring that contingency is provided for possible failure or equipment theft and that any such contingency plans are tested and kept up to date

Additionally we will take all reasonable measures to comply with our legal responsibilities under:

Gosberton Medical Centre – Privacy Notice

This privacy notice explains what happens to any personal data that you give to us, or any that we may collect from or about you. It applies to personal information processed by or on behalf of the practice.

We are committed to protecting and safeguarding your privacy and data rights.

Who we are and how we use your information

Gosberton Medical Centre will be what’s known as the ‘Controller’ of the personal data you provide to us.

Our Data Protection Officer is:Milena Krusinska (Practice Manager)๐Ÿ“ Gosberton Medical Centre๐Ÿ“ง licb.gosberton@nhs.net๐Ÿ“ž 01775 840204

What information do we process?

We collect and process:

  • Basic personal data: name, address, contact details (e.g. email, mobile number).

  • “Special category” data: health information, ethnicity, sex, and religious belief (if relevant to healthcare).

  • Information shared with us by other health providers (e.g. NHS Trusts, pharmacies, hospitals, walk-in centres).

Why do we need your information?

Your healthcare professionals keep records about your health and any treatment or care you have received. These records help us provide you with the best possible care.

Records may include:

  • Your personal details and emergency contacts.

  • Appointment history and consultation notes.

  • Reports about your health, treatment, and care.

  • Results of investigations such as blood tests and x-rays.

  • Information from other professionals, carers, or relatives.

We use a combination of working practices and technology to keep your records confidential, secure, and accurate.

What is the legal basis for processing your data?

Under the UK GDPR and Data Protection Act 2018, we process your information under the following legal bases:

  • Article 6(1)(e) – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  • Article 9(2)(h) – processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, the provision of health or social care, or the management of health or social care systems.

This means your data is processed to deliver your NHS care, not on the basis of consent. Consent will only be sought if we wish to use your information for optional purposes (e.g. research participation or communication about services outside core NHS care).

How we use your information

  • To provide direct patient care.

  • To support clinical audits and service quality checks.

  • For risk stratification (helping identify patients at risk of certain conditions or unplanned admissions).

  • For medicines management reviews, ensuring treatments are safe, effective, and cost-efficient.

  • To meet NHS requirements for planning and public health.

Confidentiality and data sharing

We are committed to protecting your privacy and will only use information collected lawfully in accordance with:

  • UK GDPR & Data Protection Act 2018

  • Common Law Duty of Confidentiality

  • Human Rights Act 1998

  • Health and Social Care Act 2012

  • NHS Codes of Confidentiality and Records Management

  • Caldicott Principles

We will only share your information where it is necessary for your care, when required by law, or in exceptional circumstances (such as life-or-death situations).

Partner organisations may include:

  • NHS Trusts / Foundation Trusts

  • GPs, pharmacies, opticians, dentists

  • Social care services and local authorities

  • NHS England and NHS Digital

  • Ambulance services, community services, voluntary providers

  • Police or judicial services (where required by law)

Where external companies process data on our behalf, they are bound by strict confidentiality and data protection agreements.

Research and service improvement

Sometimes your information may be used for research, innovation, or service evaluation.

  • You will never be identified in published research without your explicit consent.

  • You may be contacted about taking part in research projects, but this will always require your prior consent.

  • You have the right to opt out of data being used for research purposes.

Communications about services

With your consent, we may use your contact details (phone, email, address) to inform you about relevant healthcare services or health promotion initiatives that may benefit you.

  • You can withdraw consent at any time by contacting the practice.

  • We will never use your data for commercial marketing.

Where and how your data is stored

  • All personal data is stored securely in the UK or within the EU (for IT hosting and maintenance).

  • No third parties have access to your personal data unless required by law or with appropriate safeguards in place.

How long we keep your information

We are required under UK law to retain your records for the periods set out in the NHS Records Management Code of Practice for Health and Social Care.

Your rights under UK data protection law

You have the following rights:

  • Right of access – to request access to your personal data (Data Subject Access Request).

  • Right to rectification – to correct inaccurate or incomplete data.

  • Right to erasure – in certain circumstances, request deletion of your data.

  • Right to restrict processing – in specific cases.

  • Right to data portability – to transfer your data to another provider.

  • Right to object – to certain types of processing, including direct communication.

  • Right to withdraw consent – where processing relies on consent (e.g. research).

We will respond to your request within one month, as required by law.

Keeping your details up to date

It is important that your records are accurate. Please inform us of any changes (such as address, phone number, or email) by contacting the practice as soon as possible.

Your patient record is held securely and confidentially on the electronic system at your GP practice. If you require treatment in another NHS healthcare setting such as an Emergency Department or Minor Injury Unit, those treating you would be better able to give you appropriate care if some of the information from the GP practice were available to them.

This information can now be shared electronically via: The Summary Care Record, used nationally across England. The video below explains Summary Care Records in more detail.

The information will be used only by authorised health care professionals directly involved in your care. Your permission will be asked before the information is accessed, unless the clinician is unable to ask you and there is a clinical reason for access.

If you would like to opt out, please ask reception for our opt out form, however, we strongly recommend that you DO NOT  opt out of this scheme as it is vital for getting you the right treatment in an emergency,

A parent or guardian can request to opt out children under 16 but ultimately it is the GP’s decision whether to create the records or not, because of their duty of care to the child. If you are the parent or guardian of a child under 16 and feel that they are able to understand, then you should make this information available to them.

Who Has Access?

Across all health care settings, including urgent care, community care and outpatient departments in England.

Information Source

GP record

Content

  • Your current medications
  • Any allergies you have
  • Any bad reactions you have had to medicines
  • Additional information (upon request to your GP)

For more information visit:

www.digital.nhs.uk

Gosberton Medical Centre is a recognised training practice.

We host GP trainees at different stages of their training who conduct clinics as part of their development. To ensure the highest standards of patient care, all trainee clinics are carried out under the supervision of our experienced GP trainers, Dr Mo Morsy and Dr Lucy Rushworth, with supervision provided through medical debriefing at the end of each clinic.

The Practice staff shall always show due respect and courtesy when dealing with patients and their representatives. We respectfully request that patients and their representatives do the same when dealing with members of the practice team.

The NHS operate a zero tolerance policy with regard to violence and abuse and the practice has the right to remove violent patients from the list with immediate effect in order to safeguard practice staff, patients and other persons. 

No form of aggression (whether verbal or physical in nature) will be tolerated - any instances of such behaviour on the practice premises may result in the perpetrator being reported to the Police and removed from the practice’s List of Registered Patients.

Violence in this context includes actual or threatened physical violence or verbal abuse which leads to fear for a person’s safety. In this situation we will notify the patient in writing of their removal from the list and record in the patient’s medical records the fact of the removal and the circumstances leading to it.

 

Website Policies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work more efficiently, and sometimes provide useful information to the owners of the site.

There are some cookies necessary to this site functioning, such as interacting with our accessibility toolbar. These cookies will usually remove themselves when you close your browsing session. More information can be found in the ‘Necessary cookies’ section.

We use some additional cookies, such as Google Analytics, to help us gather information and improve the website. You have the option to deny use of these cookies; more information can be found in the ‘Additional cookies’ section.

In order to help us to improve the content, format and structure of this website we record and analyse how visitors use the using Google Analytics.

You can read Google’s extensive information on data practices in Google Analytics.

You can opt-out of Google Analytics on our website by denying additional cookies or by using the Google Analytics Opt-out Browser Add-on.

Cookie Purpose Expiry
_ga Distinguishes user for Google Analytics. 2 years
_gid Distinguishes user for Google Analytics. 1 day
_gat Throttles request rate for Google Analytics. 1 minute
_ga_{ID} Persists session state for newer versions of Google Analytics. 2 years
_gat_gtag_UA_{ID} Persists session state for older versions of Google Analytics. 1 minute
__utma Distinguishes user and session for Google Analytics. 2 years
__utmb Determines new session or visit for Google Analytics 30 minutes
__utmc Determines new session or visit for Google Analytics. End of browsing session
__utmz Stores traffic source for Google Analytics. 6 months

 

Cookie Purpose Expiry
cookieconsent_status Persistently records your option regarding additional cookies. 1 year

 

Necessary accessibility cookies

The following necessary cookies allow the functions within our accessibility toolbar to work optimally.

 

Cookie Purpose Expiry
accessibility-controls Records option regarding additional cookies. End of browsing session
saveFontSize Allows the website (CMS) to record if the user’s font size selection. End of browsing session
contrast-mode Allows the website (CMS) to record the user’s contrast mode selection. End of browsing session
googtrans Allows the language of page content to be changed and records the language selected. End of browsing session