Privacy Statement

Woodsley & Holt Park Primary Care Network

Version: 1
Date Reviewed: 12/08/2026
Next Review Date: 11/08/2027

Introduction

Woodsley & Holt Park Primary Care Network (PCN) is committed to protecting your privacy and ensuring that your personal information is handled securely and lawfully. This Privacy Notice explains how we collect, use, store, and share your personal information, your rights in relation to your information, and how you can contact us if you have any questions. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, NHS confidentiality requirements, and other applicable legislation.

Who We Are

Woodsley & Holt Park Primary Care Network brings together local GP practices and other healthcare providers to deliver integrated healthcare services to our patient population.

Woodsley & Holt Park

Email: vesperroad.whppcn@nhs.net

What Information We Collect

We may collect and process information including:
Patient Information
Name, address, date of birth and NHS number
Contact details
Medical and health information
Appointment and referral information
Information relating to treatment and care
Staff Information
Employment records

Recruitment information

Payroll and pension information

Training and performance records

Website Information

IP address
Device information
Website usage statistics
Cookies and analytics data

Why We Use Your Information

We process personal information for the following purposes:

Direct Care
Providing healthcare services
Managing appointments
Supporting treatment and care planning
Coordinating care with other healthcare providers
Managing Healthcare Services
Service planning and commissioning
Quality assurance and clinical audit
Patient safety monitoring
Population health management

Legal and Regulatory Requirements

Compliance with NHS and statutory obligations
Responding to safeguarding concerns
Managing complaints and investigations
Reporting requirements

Employment Purposes

Recruitment and onboarding
Payroll administration
Workforce planning
Training and development

Our Lawful Basis for Processing Under UK GDPR, we rely on one or more of the following legal bases:

Performance of a task carried out in the public interest

Compliance with a legal obligation

Provision of health and social care services

Explicit consent where required

Legitimate interests where applicable Special category health data is processed under the provisions applicable to health and social care services.

Who We Share Information With

We may share information, where lawful and necessary, with:
GP practices within the PCN
NHS England
Integrated Care Boards (ICBs)
Hospitals and community healthcare providers
Mental health services * Social care organisations
NHS Digital and other NHS bodies
Regulators and statutory agencies
Approved service providers acting on our behalf We only share the minimum information necessary and ensure appropriate safeguards are in place.

How We Protect Your Information

We are committed to maintaining the confidentiality, integrity and security of personal information.

We use:

Secure NHS systems
Access controls and role-based permissions
Staff confidentiality agreements
Information governance training
Encryption and cybersecurity measures
Regular audits and monitoring
All staff have a duty of confidentiality and are required to protect personal information

How Long We Keep Information

We retain records in accordance with:

NHS Records Management Code of Practice
UK GDPR
Statutory retention requirements
Retention periods vary depending on the type of information being processed.

Your Information Rights Under data protection legislation, you have the right to:

Request access to your personal information
Request correction of inaccurate information
Request restriction of processing in certain circumstances
Object to certain processing activities
Request erasure where applicable
Withdraw consent where consent is relied upon Not all rights apply in every circumstance.

Subject Access Requests You may request a copy of information held about you. Requests should be made in writing to:

Ophelia Cohen, PCN Manager, ophelia.cohen@nhs.net

We will normally respond within one calendar month.

National Data Opt-Out The NHS uses information for purposes beyond individual care, such as research and planning. You may be able to choose whether your confidential patient information is used in this way through the National Data Opt-Out.

Further information can be found on the NHS website.

https://www.nhs.uk/your-nhs-data-matters/manage-your-choice/

Cookies and Website Usage Our website may use cookies to:

Improve website functionality
Analyse website usage
Enhance user experience Detailed information is available in our Cookies Policy.

Complaints

If you have concerns about how we handle your information, please contact our Data Protection Officer in the first instance. You also have the right to complain to:

Information Commissioner's Office (ICO)

Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF

Website: https://ico.org.uk

Changes to This Privacy Notice We may update this Privacy Notice from time to time to reflect changes in legislation, guidance, or our services. The latest version will always be available on our website.

Approved by: PCN Board/Clinical Director]

Review Frequency:Annually