We have a  legal duty to explain how we use any personal information we collect about you, as a registered patient, at the practice. Staff at  this  practice maintain records about your health and the treatment you receive in electronic and paper format.

What information do we collect about you?

We will collect information such as personal details, including name, address, next of kin, records of appointments, visits, telephone calls, your health records, treatment and medications, test results, X-rays, etc. and any other relevant information to enable us to deliver effective medical care.

How we will use your information

Your data is collected for the purpose of providing direct patient care; however, we can disclose this information if it is required by law, if you give consent or if it is justified in the public interest. The practice may be requested to support research; however, we will always gain your consent before sharing your information with medical research databases such as the Clinical Practice Research Datalink and  others when the law allows.

In order to comply with its legal obligations, this practice may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012. Additionally, this practice contributes to national clinical audits and will send the data that is required by NHS Digital when the law allows. This may include demographic data, such as date of birth, and information about your health which is recorded in coded form; for example, the clinical code for diabetes or high blood pressure.

Processing your information in this way and obtaining your consent ensures that we comply with Articles 6(1)(c), 6(1)(e) and 9(2)(h) of the GDPR.

To ensure your privacy, we will not disclose information over the telephone or fax unless we are sure that we are talking to you. Information will not be disclosed to family, friends, or spouses unless we have prior  consent, and we do not leave messages with others.

You have a right to see your records if you wish.  An appointment will be required.

You have the right to object to our sharing your data in these circumstances but we have an overriding responsibility to do what is in your best interests.

Data Protection Officer : 
Dr Rajesh Pandey

Contact details : 
01424 430800

Data Controller Contact : 
Priory Road Surgery,
83 Priory Road,
Hastings, East Sussex,
TN34 3JJ

Access To Medical Records Policy

Click here to download the Subject Access Request policy