Your Privacy

Northiam & Broad Oak Surgeries Privacy Notices

Our practice has always provided security around your personal information and how it is used to deliver the care and services you need.

All of the data we hold about you is secured in line with legislation and complies with the General Data Protection Regulations (GDPR) which came into force in May 2018.

Your rights under GDPR legislation?

Under the General Data Protection Regulations (GPDR), any organisation using your personal data must have your explicit consent.

However, in the legislation GP practices have a legal basis for processing your confidential health data for the provision of your Direct Care (see page 3) and consent is implied by registering with the practice.

Below, you will find detailed the specific circumstances in which your personal data is used within the Health Service.

Details of the important subsections of the legislation are listed in the following pages.

Your rights to see your information

You have a right to access your medical records and these can be accessed either directly online or in the surgery by appointment (details are in the Patient Registration Pack).

You may give permission to third parties (for example a solicitor or insurance company) to be provided with copies of your records.

Your rights as a Parent or Guardian

In Article 8, the GDPR introduces specific protections for children by limiting their ability to consent to data processing without parental authorisation.

The age of consent in the UK is 16.

What do you need to do?

Please read the following sections detailing how your personal data is managed and used within this practice and the wider health service.

Each section will describe how and why your data is used along with your consent options.

Your right to opt-out of sharing data – National Opt-out scheme

The national data opt-out is a service that allows patients to opt out of their confidential patient information being used for research and planning.

Registering an opt-out is now managed centrally.

If you want to register an opt-out then please register your preferences through

To register an opt-out you will need your name, date of birth and postcode or NHS number.

Your opt-out can be changed at any time.

If you wish to discuss your options please make an appointment with reception or call 0300 3035678 for more details.