One Wight Health Ltd - Your information, what you need to know

This notice describes why we collect information about you, how your information will be used and your rights in respect of your data.

Why we collect information about you

Your records are used to ensure you get the best possible care. Your information helps them to make the best decisions about your care and helps provide you with proactive advice and guidance. We work with other NHS services to coordinate these.

Information held about you may be used to help protect the health of the public and to help us to improve NHS services. Information may be used within One Wight Health Ltd to monitor the quality of the service provided (known as a 'clinical audit').

What data do we collect and receive about you?

Records and stored electronically and on paper and include personal details about you such as your address, carers, legal representatives, emergency contact details, as well as:

  • Any appointments, visits, emergency appointments
  • Notes and reports about your health
  • Details about your diagnosis, treatment and care
  • Details about any medication you are taking
  • Results of investigations such as laboratory tests, x-rays
  • Relevant information from health and care professionals, relatives or carers

We also receive information from other organisations that are caring for you that we hold in your record. This will include letters and test results.

How we use your information: For providing your care

Social Prescribing Link Workers:

Social prescribing link workers includes social prescribers, health & wellbeing coaches and care coordinators. These roles have access to the GP electronic patient record in order to provide appropriate care to you. These roles obtain consent from you before accessing your records.

Hospital, Community or Social Care Services:

Sometimes the staff caring for you need to share some of your information with others who are also supporting you. This could include hospital or community based specialists, nurses, health visitors, therapists or social care services. Information will be shared to organisations where you receive care, whether that is local or further away, if you need specialist care or emergency care in another.

Safeguarding of children or vulnerable adults:

If we have significant concerns or hear about an individual child or vulnerable adult being at risk of harm, we may share relevant information with other organisations, such as local authorities and the Police, involved in ensuring their safety.

How we use your information: beyond providing your care:

The information collected about you when you use our services can also be used and provided to other organisations for purposes beyond your individual care, for instance to help with:

  • Improving the quality and standards of care
  • Research into the development of new treatments
  • Preventing illness and diseases
  • Monitoring safety
  • Planning new services
  • Public health screening
  • Assisting the Care Quality Commission with any investigations
  • Investigating fraud

Wherever possible data used for these purposes is anonymised so that you cannot be identified. If information cannot be completely anonymous, then this may only take place when the law allows the information to be used. All these uses help to provide better health and care for you, your family and future generations.

Statutory Disclosures

Sometimes we are duty bound by laws to disclose information to organisations such as the Care Quality Commission, the Driver and Vehicle Licensing Agency, the General Medical Council, Her Majesty's Revenue and Customs and Counter Fraud services. In these circumstances we will always try to inform you before we are required to disclose and we only disclose the minimum information that the law requires us to do so.

Objecting to the use of data for purposes beyond your care

The NHS constitution states 'You have a right to request that your personal and confidential information is not used beyond your own care and treatment and to have your objections considered. For further information please visit: The NHS Constitution.

National Data Opt Out

The national data opt-out enables patients to opt-out from the use of their personal confidential data for research or planning purposes. To find out more or to register to opt out, please visit

If you have any concerns about use of your data not covered by the National Data Opt-out, please contact the practice.

How long do we hold information for?

Records are kept for the lifetime of the patient. If you move to a new practice, your record will be transferred. If the practice you have left need to access your record, for example, to deal with a historic complaint, they will let you know. When information has been identified for destruction or deletion it will be disposed of using approved confidential disposal procedures.

Your rights:

Data Protection laws give you a number of rights, including access to your data, correction, erasure, objection and restriction of use of your data. Details on how to request access to your data are set out below. If you have any concerns about the accuracy and use of your records, please contact us.

Right of access to your information (Subject Access Request)

You have the right to have a copy of the information we hold about you. There are some safeguards regarding what you will have access to and you may find information has been removed for the following reasons.

  • Where your doctor has decided that some information may cause significant harm to you or someone else
  • Where the information is about someone else (third party) and its confidential to them

You can make a request by asking or writing to the practice. We may ask you to complete a form so that we have a record of your request You will need to provide proof of identity.

If you would like to access your GP record online, please contact your practice.

Lawful basis for processing

The use of personal data for providing care is supported under the following Article 6 and 9 conditions of the GDPR.

  • Article 6(1)(e) '...necessary for the performance of a task carried out in the public interest or in the exercise of official authority...'
  • Article 9(2)(h) '...necessary for the purposes of preventative or occupational medicine for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services...'

Data Protection Officer

Should you have any questions or concerns about your data, please contact our Data Protection Officer.


Right to complain

If you have concerns or are unhappy about any of our services, please contact the following email:

For independent advice about data protection, privacy and data-sharing issues, you can contact:

The Information Commissioner

Wycliffe House

Water Lane




Phone: 0303 123 1113, Website:

Information about our website

Your privacy is important to us. By providing personal information such as your name and e-mail address via the forms on this website, you agree to us contacting you with regard to the information you request.

Some forms on our website may also include a check box asking you for permission for us to add you to our mailing list. This is an opt-in mailing list and your personal information will be used solely by us. Under no circumstances will your personal information be sold or used by any other organisation.

From time to time, we may include links in our e-mails to other web sites which we think may be of interest to you. Each email communication you receive from us will have the option to remove your e-mail address from our list.

For further information; or to review our GDPR and Data protection policies, please e-mail our Data Protection Officer at

Information we monitor about visitors

During the course of any visit to our site, the pages you see, along with a short text file called a ‘cookie’, are downloaded to your computer. Many websites do this, because cookies facilitate useful features such as the ability to identify whether a user has successfully logged into the site or to find out whether the computer (and probably its user) has visited the website before.

Google Analytics

Google Analytics is a web analysis service provided by Google. Google utilises the data collected to track and examine the use of a website, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network.