3W Health Privacy Policy

Protecting Your Privacy – How We Use Your Information

We take your confidentiality seriously. This Privacy Notice explains:

• Why we collect information about you

• How we use it

• How we keep it safe

• What your rights are

Why we collect information

Our doctors, nurses and staff keep records about your health and any care or treatment you receive. This helps us:

• Provide you with safe, effective care

• Answer your questions

• Refer you to specialists when needed

• Monitor and improve the quality of our services

We hold information in both written and digital formats.

Our commitment to confidentiality

Everyone working in our Practice follows strict data protection laws, including the UK GDPR and the Data Protection Act 2018. We only use your information when there is a clear and lawful reason to do so.

We also follow NHS rules on confidentiality, the Human Rights Act 1998, and the Health and Social Care Act.

What information we collect

We may hold:

• Personal details (e.g. name, date of birth, contact details)

• Health information (e.g. medical history, test results, prescriptions, referrals)

• Special category information (e.g. ethnicity, religion, or other details where relevant to your care)

• Confidential patient information shared between you and healthcare professionals

• Data that may be anonymised, pseudonymised or aggregated for planning and research

How we use your information

We use your information to:

• Provide you with care and treatment

• Work with other NHS services when needed (e.g. A&E, community care)

• Improve quality and safety of services

• Help prevent illness and plan NHS services

• Support research and new treatments (usually using anonymised data)

Sometimes we are legally required to share information with organisations such as the Care Quality Commission, HMRC, or safeguarding services. We will always tell you where possible.

Your rights

You have rights over how your information is used. These include:

1. To be informed about how your data is used

2. To see your records (subject access request)

3. To have mistakes corrected

4. To ask for data to be erased (in certain circumstances)

5. To restrict or object to how your data is used

6. To move your data elsewhere (data portability)

7. To challenge automated decisions

Opting out of data sharing

You can choose to stop your information being used for purposes beyond your direct care.

• Type 1 Opt-Out: Stops your confidential information leaving your GP record, except where required by law. Ask the Practice to record this.

• National Data Opt-Out: Stops your confidential information being used for NHS research or planning. Set this online at www.nhs.uk/your-nhs-data-matters.

Accessing your records

You can request a copy of your medical records. Requests can be made verbally or in writing. You may also access your records online via the NHS App or through our Practice’s system. Proof of ID will be required.

How long we keep your information

We follow the NHS Records Management Code of Practice 2021. Records are kept only as long as necessary and securely destroyed when no longer needed.

Contact details

If you have any questions about how your information is used, please contact our Data Protection Officer via the Practice.

You can also contact the Information Commissioner’s Office (ICO) for independent advice:

• Website: www.ico.org.uk

• Phone: 0303 123 1113

More information

• The NHS Care Record Guarantee

• The NHS Constitution