Privacy notice
How Wrenfield Family Health collects, uses and protects your personal and health information, and the rights you have over it.
Last updated
Template note for the buyer. This page is realistic sample text, not legal advice. Health data is a special category under UK GDPR and the requirements differ by jurisdiction. Have your own notice reviewed before you launch. Delete this note when you replace the content.
Who we are
Wrenfield Family Health Ltd is the data controller for the information described here. You can contact our Data Protection Officer at dpo@wrenfield.example.com or by post at 14 Wharf Lane, Riverside Quarter, London SE1 4RT.
What we collect
Information you give us. Your name, date of birth, contact details, the reason for your appointment, your medical history, and anything you tell a clinician during a consultation.
Information we create. Consultation notes, examination findings, test results, referral letters and prescriptions.
Information from others. With your consent, records from your NHS practice, previous providers, hospitals and laboratories we use.
Technical information. Our website records anonymous, aggregated page statistics. We do not use advertising cookies and we do not share browsing data with third parties.
Why we use it
- To provide your care. Our lawful basis is Article 6(1)(e) and, for health data, Article 9(2)(h) of the UK GDPR — the provision of health care by a professional bound by a duty of confidentiality.
- To contact you about appointments, results and follow-up.
- To meet legal obligations, including safeguarding and regulatory reporting.
- To take payment and, where you ask us to, to invoice your insurer.
We do not use your health information for marketing. We do not sell data.
Who we share it with
Only where it is necessary for your care, where you have asked us to, or where the law requires it. That may include laboratories processing your samples, specialists we refer you to, your insurer where you have asked us to invoice them, and our regulator in defined circumstances.
We will not write to your NHS GP without asking you first, on each occasion.
How long we keep it
Adult health records are retained for ten years after your last contact. Children’s records are retained until their twenty-fifth birthday. This follows Department of Health and Social Care retention guidance. Financial records are kept for seven years as tax law requires.
Your rights
You have the right to access your records, to have inaccurate information corrected, to restrict or object to certain processing, to receive your data in a portable format, and in some circumstances to have it erased. There is no charge and we will respond within one month.
To exercise any of these, contact our Data Protection Officer.
Complaints
If you are unhappy with how we have handled your information, please tell us first — see our complaints procedure. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.