What do we use your information for?

We hold your medical record so that we can provide you with safe care and treatment. We will also use your information so that our surgery can check and review the quality of care we provide, this helps us to improve the service we provide to you. We shall share relevant information from your medical record with other health or social care staff or organisations when they provide you with care. For example, your GP will share information when they refer you to a specialist in a hospital or your GP will send details about your prescription to your chosen pharmacy.

Aside from sharing information directly for your care, there are some other purposes that we may share data for, including:

Risk Stratification

Risk stratification is a process GPs use to help them to identify a person who may benefit from a targeted healthcare intervention and to help prevent un-planned hospital admissions or reduce the risk of certain diseases developing such as type 2 diabetes. This is called risk stratification for case-finding. As part of this, our surgery uses a primary care software system called Eclipse.

Population Health Management (PHM)

This work is aimed at improving the health of both local and national populations.

It is about improving the physical and mental health outcomes and wellbeing of people and making sure that access to services is fair and equal. It helps to reduce the occurrence of ill-health and looks at all the wider factors that affect health and care.

More information

NHS Digital

NHS Digital is a national body which has legal responsibilities to collect information about health and social care services. It collects information from across the NHS in England and provides reports on how the NHS is performing. These reports help to plan and improve services to patients. This surgery must comply with the law and will send data to NHS Digital, for example, when it is told to do so by the Secretary of State for Health or NHS England under the Health and Social Care Act 2012.

The General Practice Extraction Service (GPES) collects information for a wide range of purposes, including providing GP payments. It works with the Calculating Quality Reporting Service (CQRS) and GP clinical systems as part of the GP Collections service. Find out more here.

Care Quality Commission (CQC)

The CQC regulates health and social care services to ensure that safe care is provided. The law says that we must report certain serious events to the CQC, for example, when patient safety has been put at risk. For more information about the CQC see: http://www.cqc.org.uk/

Public Health

The law requires us to share data for public health reasons, for example, to prevent the spread of infectious diseases or other diseases which threaten the health of the population. We will report the relevant information to local health protection team or Public Health England.

Who do we share your information with?

We may share your information with other parties dealing with your care. When we do this we will inform you first unless we have a legal basis. We will not share your information with marketing organisations or other organisations that could cause you harm or lead to intrusive contact


Some examples are:

·         Local Council

·         Hospital

·         Mental Health Trust

·         Ambulance Service

·         Care Homes

·         Social Care

·         Safeguarding

·         Clinical Commissioning Group (CCG)

·         Clinical system providers

·         Police

·         Coroner

·         Confidential Waste removal company

Follow this link to see a list of the partners that we usually share with.

Suffolk Primary Care Partnership has signed a Suffolk Wide Information Sharing Agreement which allows health and social care providers to agree a secure and lawful way to share your information.

Sharing when Required by Law

We will keep you informed of how your data is used through this privacy notice, however please note that there may be times when we may not notify you such as for the prevention and detection of crime, safeguarding purposes, or as requested by a Court Order. We will only do this when the law requires us to do so.

Multi-disciplinary Meetings

Multidisciplinary teams (MDTs) are teams of professionals from different disciplines in primary, community, social care and mental-health services who work together to plan a patient's care.


CCTV is in place in the following practices;

·         Norwich Road Surgery, Ipswich
·         Stowhealth, Stowmarket
As a research active practice, we may invite you to participate in research studies that may be of interest to you. This may be done via letter, text message and/or by phone. It is up to you to decide whether or not to take part. More information can be found here.



Text Messages

Please note that we will use your mobile number to text you with information regarding your care such as appointment reminders or public health messages. Please let us know if you would not like your mobile number used for this purpose.

Information Access and Rights

By law, you have certain rights related to your information. These are:

The right to be informed

You have the right to know what information that we hold about you, what we do with it and why. We inform patients through this privacy notice.

The right of access

You have the right to have a copy of the information that we hold on you. We must provide this to you within one calendar month and free of charge unless an exemption applies. We may need you to prove your identity before we can release any information to you.

The right of rectification

You have the right to have your personal data corrected if inaccurate.

The right to erasure

You have the right to have your personal data erased in certain circumstances.

The right to restrict processing

You have the right to restrict the processing of your personal data in certain circumstances.

The right to data portability

You have the right that allows you to obtain and reuse your information for your own purposes. You have the right to have your information in a digital format.

The right to object

You have the right to prevent the processing of your information in certain circumstances.

Rights related to automated decision making and profiling

We must inform you if we do this kind of processing, and offer you a human-based alternative.

If you wish to exercise any of your rights, you should contact your GP practice.


If you are concerned about the way we are handling your information or wish to make a complaint please contact the Practice Manager of your practice

If you still have further concerns then please contact the Data Protection Officer – Paul Cook – email: (please pick which email address relates to the CCG you come under) wsccg.dpo@nhs.net or iesccg.dpo@nhs.net

The Data Protection Officer service is provided by the West Suffolk Clinical Commissioning Group (WSCCG) more information is available at: https://www.westsuffolkccg.nhs.uk/

The Data Protection Officer service is provided by Ipswich and East Suffolk Clinical Commissioning Group (IESCCG) more information is available at: http://www.ipswichandeastsuffolkccg.nhs.uk/

If the issue cannot be resolved by our organisation or the Data Protection Officer, you have the right to report it to the Information Commissioners Office (ICO). The ICO is the UK’s independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. You can contact them on the details below:


Phone – 0303 123 1113

Customer Contact
Information Commissioner's Office
Wycliffe House
Water Lane

Your Data Matters

Information about your health and care helps us to improve your individual care, speed up diagnosis, plan your local services and research new treatments. In May 2018, the strict rules about how this data can and cannot be used were strengthened. The NHS is committed to keeping patient information safe and always being clear about how it is used.

The National Data Opt-Out programme is a service that allows patients to opt-out of their confidential patient information being used for research and planning.

Patients can view or change their national data opt-out choice at any time by using the online service at www.nhs.uk/your-nhs-data-matters‚Äč

Hide this section
Show accessibility tools