Boroughbridge Road, Northallerton, North Yorkshire, DL7 8AW

Online: Contact Us Online
Telephone: 01609 772105 ( Out of Hours: 111 )

National Health Service Logo

Data Protection, Privacy and Confidentiality


Practice Privacy Policy for Patients

Our Practice Privacy Notice explains what information we collect about you, how we store this information, how long we retain it and with whom and for which legal purpose we may share it, the document can be downloaded here:

Practice Privacy Notice

Coronavirus (COVID-19) pandemic and your information

The ICO recognises the unprecedented challenges the NHS and other health professionals are facing during the COVID-19 pandemic.

The ICO also recognise that 'Public bodies may require additional collection and sharing of personal data to protect against serious threats to public health.'
The Government have also taken action in respect of this and on 20th March 2020 the Secretary of State for Health and Social Care issued a notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 requiring organisations such as GP Practices to use your information to help GP Practices and other healthcare organisations to respond to and deal with the COVID-19 pandemic.
Please note that this notice has now been revised and extended by a further notice from 29th July 2020 until 31st March 2021.

In order to look after your healthcare needs during this difficult time, we may urgently need to share your personal information, including medical records, with clinical and non clinical staff who belong to organisations that are permitted to use your information and need to use it to help deal with the COVID-19 pandemic. This could (amongst other measures) consist of either treating you or a member of your family and enable us and other healthcare organisations to monitor the disease, assess risk and manage the spread of the disease. Additionally, the use of your information is now required to support NHS Test and Trace.

Please be assured that we will only share information and health data that is necessary to meet yours and public healthcare needs.
The Secretary of State for Health and Social Care has also stated that these measures are temporary and will expire on 31st March 2021 unless a further extension is required. Any further extension will be will be provided in writing and we will communicate the same to you.

Please also note that the data protection and electronic communication laws do not stop us from sending public health messages to you, either by phone, text or email as these messages are not direct marketing.

It may also be necessary, where the latest technology allows us to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.

If you are concerned about how your information is being used, please contact our DPO using the contact details provided in this Privacy Notice.

Top of Page

Research and Planning

This practice is supporting vital health and care planning and research by sharing your data with NHS Digital. For more information about this see the GP Practice Privacy Notice for General Practice Data for Planning and Research.

You have the choice to opt out if you wish to, please see Research and Planning Opt Out.

Top of Page

Enhanced Data Sharing Model

If you are being looked after by another health care provider who operate the same medical software as us, SystmOne, you can give permission for that provider to share their information with us, or for us to share our information with them. You have to opt in to this and it will not happen without you being asked when you attend the surgery or the other provider.

Please read Patient Guide on eDSM for further information.

Top of Page

Freedom of Information

Information available from Mayford House Surgery under the Freedom of Information Act model publication scheme can be obtained from our Practice Manager.

Top of Page

NHS Summary Care Records

As part of a mandatory, national programme each GP Practice will have to make a summary care record for each patient (unless the patient has already opted out).

Please read the information regarding this.

If you wish to opt out download and complete the opt out form and return to the Practice (see below).

Information Website

Further information can be found at the NHS Digital website.

Information Leaflets & Opt-Out Form

Top of Page

Transferring Your Electronic Health Record

Your GP practice holds copies of your patient health record electronically and in paper format. Both contain the healthcare information about you that your GP needs including your medical history, medications, allergies, immunisations and vaccinations.

If you have previously registered with a different GP in England, upon registering at this practice your electronic health record will, where possible, be transferred automatically from your previous practice through the use of an NHS system called GP2GP.

For further information please download this information leaflet.