Our Privacy Notice

Selsey Medical Practice is part of the Chichester Alliance of Medical Practices (ChAMP). ChAMP Practices have adopted a common Privacy Notice. You can download a copy of this document by clicking on the image. This Privacy Notice document was created by NHS South Central and West Commissioning Support Unit (SCW) 

Your Information - what you need to know

The privacy notice explains why Selsey Medical Practice collect information about you, how that information will be used, how we keep it safe and confidential and what your rights are in relation to this.

Why we collect information about you.

Health care professionals who provide you with care are required by law to maintain records about your health and any treatment or care you have received.  These records help to provide you with the best possible healthcare and help us to protect your safety.

We collect and hold data for the purpose of providing healthcare services to our patients and running our organisation which includes monitoring the quality of care that we provide. In carrying out this role we will collect information about you which helps us respond to your queries or secure specialist services. We will keep your information in written form and/or in digital form.

Please note the Privacy Notice is likely to be updated. 

We are required by law to provide you with the following information about how we handle your information and our legal obligations to share data.

Data Controller contact details

Nicola Collins, Practice Manager

Selsey Medical Practice

High Street

Selsey

PO20 0QG

Data Protection Officer contact details

Laura Taw

NHS South 

1 The Causeway

BN12 6BT

Purpose of the processing

Compliance with legal obligations or court order.

Lawful basis for processing

The following sections of the GDPR mean that we can share information when the law tells us to.

1. Where we have a contract with an organisation we are sharing with or we are obliged to share as in HMRC - Article 6(1)(c) – ‘processing is necessary for compliance with a legal obligation to which the controller is subject…’

2. When we share patient information with another provider of health care it is in line with - Article 6 1 (e )  ‘processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller’

3. Article 9(2)(h) – ‘processing is necessary for the purpose of preventative…medicine…the provision of health or social care or treatment or the management of health or social care systems and services...’
4. We will be sharing different types of data with these organisations, and for a different legal basis;
   The data will be shared with NHS Digital.
   The data will be shared with the Care Quality Commission.
   The data will be shared with our local health protection team or Public Health England.
   The data will be shared with the court if ordered.