Privacy notice

As data controllers, GPs have fair processing responsibilities under the Data Protection Act 2018 and the General Data Protection Regulation (GDPR). This means ensuring that your personal confidential data (PCD) is handled in ways that are safe, transparent and what you would reasonably expect. Please find documents and links below.

Privacy Fair Processing Notice

Privacy Notice NHS Digital

Say Yes To Data Sharing

Telephone Recording

Privacy Notice – Telephone Call Recordings v1.0

Data Protection Officer contact details: Umar Sabat,

How we use your medical records

Important information for patients:

  • This practice handles records in-line with laws on data protection and confidentiality.
  • We share medical records with those who are involved in providing you with care and treatment.
  • In some circumstances we will also share medical records for medical research, for example to find out more about why people get ill.
  • We share information when the law requires us to do so, for example, to prevent infectious diseases from spreading or to check the care being provided to you is safe.
  • You have the right to be given a copy of your medical record.
  • You have the right to object to your medical records being shared with those who provide you with care.
  • You have the right to object to your information being used for medical research and to plan health services.
  • You have the right to have any mistakes corrected and to complain to the Information Commissioner’s Office. Please see the Practice Privacy Notice on the website for more information about your rights.
  • For more information, ask at reception for a leaflet or visit our website:

uMed Practice Privacy Notice Statement

Supporting Research Activity Heald Green Health Centre uses Umedeor Ltd (uMed) as a data processor to support research and care support activity. This includes accessing and secure hosting of health record data for the purpose of identifying patients that are eligible for specific research or care support projects. uMed also contacts those patients on behalf of the practice via SMS, letter, email or telephone to provide more information about the study, and to collect additional information to assess your eligibility for a certain study.

Your consent will be required before any practice data is shared externally with researchers. uMed applies the national opt-out to practice data it receives so if you wish your data is not processed for research you can do so by visiting

For further information on uMed please visit their website at or email

Date published: 20th September, 2023
Date last updated: 31st May, 2024