top of page
Privacy and GDPR: Text
What is this?
We are required by law to provide you with information on how we use your data. There is a highly detailed privacy notice available from our website at https://www.penceatmedical.com/privacy-notice, but this simplified notice is provided for clarity.
This notice was last updated October 2023.
Who are we?
We are Cricklewood General Practice. We provide medical services to you as a patient as part of the NHS.
NHS Services at Cricklewood General Practice are provided by Penceat Medical Limited
Address: Cricklewood General Practice:
7 Oaklands Road, London, NW2 6DJ
Telephone: 0203 826 8084
Data Protection Officer
The practice is required by law to have a Data Protection Officer. The contact details are:
Name: Steve Durbin
Address: Please use the practice address above, marking “For the attention of the Data Protection Officer
Purposes of Processing, Legal Basis, Types of Data
We process data to carry out our role as your General Practitioner in providing you with healthcare.
The legal basis for this purpose is provided by the various NHS and social care acts. The Data Protection Act 2018 section 8 allows us to process data for these purposes. This provides a legal basis for processing under the UK GDPR Article 6 1(e) – task in the public interest.
For special category data, the Data Protection Act section 10 applies (health and social care purpose) and hence UK GDPR Article 9 2(h) – provision of health and social care. There are additionally some situations where other provisions are used; these are given in more detail in the full notice.
The types of data we keep relate to your health and care. These include both personal identifiers (e.g. your name, NHS number) and special category personal data (e.g. your health conditions).
Further details are provided in the full notice.
Recipients of Your Data
We share data with other health and social care providers in order to provide you with care. You can opt out of this sharing, but this may affect your care. See the full privacy notice for details.
We are additionally required to supply data to other parts of the NHS for commissioning and audit purposes, as well as to provide information that’s used in the NHS App.
We share data for research purposes, and for health and care planning. You again can opt out of these purposes; this will generally not affect you individually, but will mean that research and planning may not take into account needs of people such as yourself. See the full privacy notice for details.
Transfers to Other Countries
We do not store or transmit your data outside of the UK unless this is either:
a) Required for your care and you have consented to this
b) Covered by a formal contract with a system provider to the NHS ensuring your data is not used for any purposes not in this notice and compliant with the UK GDPR; or
c) We are required to under international law
We do not sell your data.
How Long Will You Keep My Data?
This depends on a number of factors such as how long you stay with our practice and the type of data. Generally, when you leave our practice, your data is transferred to the new practice or to central records and we do not retain after that point.
Full details of how long different types of data are held can be found in the NHS Records Management Code of Practice.
You have the right to:
• Receive a copy of your data (Subject Access Request)
• Have your data corrected, erased or restrict processing
• Complain to our Data Protection Officer or the supervisory authority (the Information Commissioner) about our use or handling of your data
If you wish to exercise your rights, please contact the practice in the first instance - details above. You can also contact the Data Protection Officer if you prefer – details are again given above, or you can contact the Information Commissioner (ICO) – details via their website at https://ico.org.uk.
Provision of Data
It is not generally a legal requirement for you to provide us with data – however if you do not do so we may be unable to provide you with treatment. For more detail see the full privacy notice.
Automated Decision Making
We use various tools to simplify care and ensure that you get the best care possible.
Some of these have a degree of automation, for example, where a regular test is recommended for a health condition you have, or you are in a particular age and gender range and have not had a recommended screening test, we will have an automated list that flags you to be contacted. These recalls are automated, but it’s up to you to book an appointment; no action is taken beyond contacting you.
NO decisions on your care are taken without human intervention.
A cookie is a small file, typically of letters and numbers, downloaded on to a device (like your computer or smart phone) when you access certain websites.
Cookies allow a website to recognise a user’s device.
Some cookies help websites to remember choices you make (e.g. which language you prefer if you use the Google Translate feature). Analytical cookies are to help us measure the number of visitors to a website. The two types we use are ‘Session’ and ‘Persistent’ cookies. Some cookies are temporary and disappear when you close your web browser, others may remain on your computer for a set period of time.
We do not knowingly collect or intend to collect any personal information about you using cookies. We do not share your personal information with anyone.
What can I do to manage cookies on my devices?
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
If you are concerned about cookies and would like to ask further questions please do not hesitate to write to our website developers – firstname.lastname@example.org
Privacy and GDPR: Text
bottom of page