Privacy policy

Practice Full Privacy Notice

Our Practice Privacy Notices explain what information we collect about you, how we store this information, how long we retain it and with whom and for which legal purpose we may share it, the documents can be downloaded here:

Somerset Gardens Family Health Care Centre - Practice Full Privacy Notice

GDPR and Practice Privacy Notice

1. Introduction

The Data Protection Regulations in the UK include two key pieces of law 

There are other regulations in specific areas which need to be taken into account. This Privacy Notice has been written within the legislative framework as at September 2023. It will be revised as the framework and case law change.  This notice was last updated September 2023.

2. What is this Privacy Notice about?

This Privacy Notice is part of the information to data subjects about how personal data is used. Being transparent and providing accessible information to individuals about how organisations will use their personal information is a key element of Data Protection Regulations. This Privacy Notice is part of our programme to make the data processing activities we are carrying out in order to meet our healthcare obligations transparent. The Privacy Notice tells you about information we collect and hold about you, the legal basis for collecting and holding the information, what we do with it, how we keep it secure (confidential), who we might share it with and what your rights are in relation to your information.

 3. Who we are

Somerset Gardens Family Health Care Centre is located at 4 Creighton Road, Tottenham, London, Greater London, N17 8NW. The partners are as follows:

  • Dr Loretta Bastianpillai
  • Dr Ravi Gooneratne
  • Dr Kate Rees
  • Dr Folakemi Edun
  • Dr Jamie Coady
  • Mrs Marion Lombardelli

 The other clinical staff are Practice Nurses, Healthcare Assistants, Clinical Pharmacists, Physician Associate, and a Physiotherapist, all supported daily by a reception and administration team.

4. Our Philosophy of Patient Care – Our Values

The practice philosophy is to give attention to patients’ needs and see them as individuals. The partners are keen to provide a high quality of care to their patients, while maintaining a good work life balance for all. The partners along with the salaried GPs work within a well-functioning partnership, where they are supportive of one another and sensitive to each other’s needs.

The practice has been awarded Beacon status for our diabetic care and we continue to develop this. Every Friday there is a co-ordinated diabetic clinic with all the relevant team members and this year we are holding a high profile weekend clinic to inform patients of the latest in diabetes care.

We also hold a very popular flu jab day on a Saturday morning. The patients are offered tea and coffee and look on it as an annual event for their diary. We therefore almost achieve our target on that day.

We can only achieve the above by continuously:

  • Putting our patients at the heart of all practice developments and services
  • Consulting our patients on the needs and demands of the practice and invite patient discussion and feedback.
  • Treating everyone as an individual.
  • Making all decisions in respect of patient management and provision of services to be based upon clinical need.
  • Ensuring that all clinical and non-clinical members of the team commit to undertake continuous professional development to ensure that their knowledge, skills andability remain up-to-date and meet the demands of their role.
  • Robust record keeping and acceptance of technologies to assist with continuity of care and advanced medical record keeping.
  • Undertaking regular audit and appraisal of all clinical and non-clinical practises.

4. Types of information we use

We use the following types of information/data:

Personal data or sensitive personal/special categories of personal data such as:

  • Demographics – name, address, date of birth, postcode, NHS number
  • Racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, medical/health data, sexual life or sexual orientation data.
  • Pseudonymised - about individuals but with identifying details (such as name or NHS number) replaced with a unique code.
  • Anonymised - about individuals but with identifying details removed.
  • Aggregated - anonymised information grouped together so that it doesn't identify individuals.

5. What we use your personal data and special categories of personal data (known as or sensitive personal) for

We use and share information about you in a number of ways. These include, if you are a patient:

Primary uses - information from your GP medical record which can be made available to other NHS and public sector organisations, including doctors, nurses and care professionals in order to help them make the best informed decision, and provide you with the best possible direct care delivery.

Secondary uses - information from your GP medical record involves extracting identifiable data and (usually) sharing that data with other NHS organisations, for the purpose of indirect care. Examples include using your information for research, auditing, and healthcare planning (population health management). 

6. Identity and Contact details of the Data Controller and Data Protection Officer 

Practice Contact Details:

  • Somerset Gardens Family Health Care Centre is located at 4 Creighton Road, Tottenham, London, Greater London, N17 8NW.
  • Practice ICO Reference Number: Z1158413

Data Protection Officer

You can contact the data protection officer by post at the practice address, addressed for the attention of the Data Protection Officer.

The Data Protection Officer service is provided across NCL practices by:

  • Name: Steve Durbin
  • Email: dpo.ncl@nhs.net
  • Please quote the practice name in any communication.

7. Organisations we share your personal information with

We share information about you with other GPs, NHS acute or mental health Trusts, local authorities, community health providers, pharmacists, commissioning organisations, medical research organisations and some specific non-NHS organisations for the purposes of direct and indirect care delivery of care.

We are required under the law to provide you with the following information how we process your personal data, the purpose of proposing, recipient/categories of your personal data, the identity of our Data Protection Officer (DPO), how long we retain personal information about you, the legal basis and justification for the processing, and your right to view, request access copies of your personal information, or object to the processing.

Included below is a table of the organisations we share information about you, and data processors we use to process your information, split into the following categories.

In most cases, the Data Controller and Data Protection Officer (DPO) are as listed in section 6 above.