Data Protection Privacy Notice for Patients

Data Sharing

How Bideford Medical Centre uses your information to provide you with healthcare

We hold your medical record so that we can provide you with safe care and treatment.

NHS health records may be electronic, on paper or a mixture of both, and we use a combination of working practices and technology to ensure that your information is kept confidential and secure.

Records which the practice holds about you may include the following information:

We will also use your information so that this practice can check and review the quality of the care we provide. This helps us to improve our services to you.

We will share relevant information from your medical record with other health or social care staff or organisations when they provide you with care. For example, your GP will share information when they refer you to a specialist in a hospital. Or your GP will send details about your prescription to your chosen pharmacy.

Healthcare staff working in A&E and out of hours care will also have access to your information. For example, it is important that staff who are treating you in an emergency know if you have any allergic reactions. This will involve the use of your Summary Care Record [OR Emergency Care Summary / Individual Health Record]. For more information see:

or alternatively speak to your practice.

This practice is part of the Local Shared Care Record initiative. This is a Devon wide service initiative and includes: -  Out of hours health services, hospital wards and A&E within Devon, Community Health services  such as District Nurses, Podiatrists, Occupational Therapists  and SWAST (South West Ambulance Service Trust).  In includes data such as recent diagnosis, test results, allergies, medications, current or past (and significant) illnesses, encounters and referrals. Access will only be granted to health care professionals on a need to know basis with your consent.

For more information see:

You have the right to object to information being shared for your own care. Please speak to the practice if you wish to object. You also have the right to have any mistakes or errors corrected.

Other important information about how your information is used to provide you with healthcare

Registering for NHS care

Identifying patients who might be at risk of certain diseases


PINCER is a proven pharmacist-led IT-based intervention to reduce clinically important medication errors in primary care. The intervention comprises three core elements:

1) Identification of patients at risk of potentially hazardous prescribing using a set of prescribing safety indicators.

2) Pharmacists specifically trained to deliver the intervention, providing an educational outreach intervention where they meet with GPs and other practice staff to:

3) Pharmacists (and pharmacy technicians) working with, and supporting, general practice staff to implement the agreed action plan.

All patient level data remains within the GP practice with only practice summative data being submitted to the CHART Online national comparative database. 

For more details of the study please visit online:


We are required by law to provide you with the following information about how we handle your information.

Data Controller - contact details: Bideford Medical Centre, Abbotsham Road, Bideford, EX39 3AF

Data Protection Officer - Bex Lovewell email or postal address: Sentinel Healthcare SouthWest Community Interest Company, c/o Express Diagnostics & Treatment Services, 6 Research Way, Plymouth, PL6 8BU

Purpose of the processing:

Lawful basis for processing:

These purposes are supported under the following sections of the GDPR

Article 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’; and

Article 9(2)(h) ‘necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...” 

Healthcare staff will also respect and comply with their obligations under the common law duty of confidence.

Recipient or categories of recipients of the processed data

The data will be shared with:

Rights to object

Right to access and correct

Retention period

We are required under UK law to keep your information and data for the full retention periods as specified by the NHS Records management code of practice for health and social care and national archives requirements. More information on records retention can be found online at:

Right to complain

You have the right to complain to the Information Commissioner’s Office. If you wish to complain follow this link or call the helpline 0303 123 1113

Data we get from other organisations

We receive information about your health from other organisations who are involved in providing you with health and social care. For example, if you go to hospital for treatment or an operation the hospital will send us a letter to let us know what happens. This means your GP medical record is kept up-to date when you receive care from other parts of the health service.

Data Sharing