Data Protection, Privacy and Confidentiality


Practice Privacy Policies for Patients

Our Privacy Notices explains what information we collect about you, how we store this information, how long we retain it and with whom and for which legal purpose we may share it, the documents can be downloaded here:

Privacy Notice  Direct Care

Privacy Notice National Screening Programmes

Privacy Notice Safeguarding

Privacy Notice Care Quality Commission

Privacy Notice Payments

Privacy Notice Summary Care Record

Privacy Notice Emergencies

Privacy Notice Public Health

Privacy Notice NHS Digital

Privacy Notice Research

Chain SMS to Message Patients

Our SMS / text service allows the  doctor can text you to  inform you of tests results, health care and useful links related to your care. This is a SEND only service so you will not be able to reply or send messages  to the surgery. If you have given us your mobile phone this is implied consent for this service, however, if you wish to opt out please let reception know.

If you change your mobile number could you kindly inform us so we can make sure your up to date number is on our system.

Further information can be found in the Chain SMS Leaflet.

The Surrey Care Record

The Surrey Care Record is a secure, encrypted extract of records from health and social care providers that can be seen and used by authorised staff in the health and care system who are involved directly in your care.

For further information please visit the Surrey Heartlands Health and Care Partnership website.

Freedom of Information

Our Practice FOI Act Published Response Information

Our published FOI details can be downloaded here.

How to Make a Freedom Of Information (FOI) Request

The Freedom of Information Act

The Freedom of Information Act gives you the right to access recorded information held by public sector organisations.

Anyone can request information – there are no restrictions on your age, nationality or where you live.

Your request will be handled under different regulations depending on the kind of information you ask for, eg the:

Data Protection Act if you ask for information an organisation holds about you

Environmental Information Regulations if you ask for environmental information

An organisation could refuse your request if the information is sensitive or the costs are too high.

Our duty to you

The Freedom of Information (FOI) Act 2000 requires us to:

  • Provide information to you about our practice through a publication scheme
  • Provide a guide to this information
  • Respond appropriately to requests for information

Before you make a request

You might not need to make a Freedom of Information request to get the information you need.

Our organisation might be able to give you information straight away, eg over the phone. You can also check our published response – link above.

Who can request information?

Anyone, anywhere in the world, can make a FOI request to NHS England.

What can I request?

You can seek any recorded information that you think NHS England may hold.

If the information is environmental, we will respond according to the Environmental Information Regulations 2004. You do not have to know whether the information you want is covered by the EIR or the FOI Act. When you make a request, we will decide which law applies.

If the information is your own personal data,  then you should make a subject access request under the Data Protection Act  (DPA) 1998, and not under the FOI Act. See below for how to make DPA requests.

How to make an FOI request

Please contact our Practice Manager in writing to make a Freedom of Information request. This can be by:

  • letter
  • email
  • fax

What to include

You should give:

  • your name (not needed if requesting environmental information)
  • a contact address
  • a detailed description of the information you want - eg you might want all information held on a subject, or just a summary

You can ask for information in a particular format,

  • paper or electronic copies of information
  • audio format
  • large print

When you’ll get a response

You should get the information within 20 working days. The organisation will tell you when to expect the information if they need more time.

Check the copyright status of information you receive if you plan to reproduce it.

If your request is turned down

Some sensitive information isn’t available to members of the public. If this applies, an organisation must tell you why they can’t give you some or all of the information you requested.

They might ask you to be more specific so they can provide just the information you need.

Reviews and complaints

If an organisation doesn’t provide you with the information you requested, you should first ask them to review their decision.

You can then complain to the Information Commissioner's Office if you’re still not satisfied.

NHS Summary Care Records

As part of a mandatory, national programme each GP Practice will have to make a summary care record for each patient (unless the patient has already opted out).

Please read the information regarding this.

If you wish to opt out download and complete the opt out form and return to the Practice (see below).

Information Website

Further information can be found at the NHS Digital website.

Information Leaflets & Opt-Out Form

Transferring Your Electronic Health Record

Your GP practice holds copies of your patient health record electronically and in paper format. Both contain the healthcare information about you that your GP needs including your medical history, medications, allergies, immunisations and vaccinations.

If you have previously registered with a different GP in England, upon registering at this practice your electronic health record will, where possible, be transferred automatically from your previous practice through the use of an NHS system called GP2GP.

For further information please download this information leaflet.