At our practice, we are fully committed to maintaining the confidentiality and privacy of all patients, in accordance with the Data Protection Act 2018. and the UK General Data Protection Regulation (UK GDPR).

All personal and medical information, including details as simple as the fact that you are registered with the practice, is treated as strictly confidential. Information will only ever be shared with your explicit consent, unless required by law or in the most exceptional circumstances—such as when there is a serious risk of harm to you or others.

Every member of our team, from reception staff to clinicians, may have access to your medical records as part of their role. All staff are trained in information governance and operate under a strict duty of confidentiality, with systems in place to ensure access is appropriate, secure, and auditable.

We ensure that:

• Your personal data is only processed where necessary for your care.
• Only the minimum necessary data is accessed.
• Your rights under the UK GDPR, including the right to access and correct your information, are upheld.
• All staff adhere to NHS guidance and Caldicott principles at all times.

If you would like to know more about how your data is handled, please refer to our full Privacy Notice, available on our website and in our waiting areas.