Boroughbridge Road, Northallerton, North Yorkshire, DL7 8AW

Online: Contact Us Online
Telephone: 01609 772105 ( Out of Hours: 111 )

National Health Service Logo

Data Protection, Privacy and Confidentiality


Practice Privacy Policy for Patients

Our Practice Privacy Notice explains what information we collect about you, how we store this information, how long we retain it and with whom and for which legal purpose we may share it, the document can be downloaded here:

Practice Privacy Notice

Coronavirus (COVID-19) pandemic and your information

The ICO recognises the unprecedented challenges the NHS and other health professionals are facing during the COVID-19 pandemic.

The ICO also recognise that 'Public bodies may require additional collection and sharing of personal data to protect against serious threats to public health.'
The Government have also taken action in respect of this and on 20th March 2020 the Secretary of State for Health and Social Care issued a notice under Regulation 3(4) of the Health Service (Control of Patient Information) Regulations 2002 requiring organisations such as GP Practices to use your information to help GP Practices and other healthcare organisations to respond to and deal with the COVID-19 pandemic.
Please note that this notice has now been revised and extended by a further notice from 10 September 2021 until 31st March 2022.

In order to look after your healthcare needs during this difficult time, we may urgently need to share your personal information, including medical records, with clinical and non clinical staff who belong to organisations that are permitted to use your information and need to use it to help deal with the COVID-19 pandemic. This could (amongst other measures) consist of either treating you or a member of your family and enable us and other healthcare organisations to monitor the disease, assess risk and manage the spread of the disease. Additionally, the use of your information is now required to support NHS Test and Trace.

Please be assured that we will only share information and health data that is necessary to meet yours and public healthcare needs.
The Secretary of State for Health and Social Care has also stated that these measures are temporary and will expire on 31st March 2022 unless a further extension is required. Any further extension will be provided in writing and we will communicate the same to you.

Please also note that the data protection and electronic communication laws do not stop us from sending public health messages to you, either by phone, text or email as these messages are not direct marketing.

It may also be necessary, where the latest technology allows us to do so, to use your information and health data to facilitate digital consultations and diagnoses and we will always do this with your security in mind.

If you are concerned about how your information is being used, please contact our DPO using the contact details provided in this Privacy Notice.

Top of Page

Medicines Management

Your GP Practice supports a medicines management review service of medications prescribed to its patients. This service involves a review of prescribed medications to ensure patients receive the most appropriate, up to date and cost-effective treatments. This service is provided by qualified and registered healthcare professionals from within the GP practice, our NHS Primary Care Network, NHS North Yorkshire Clinical Commissioning Group or by external partners approved by the GP practice. Patient identifiable information does not leave the practice system but is accessed to ensure only appropriate clinical recommendations or decisions are made for each patient. Each patient can opt out of (or back into) the practice using their data for anything other than specified purposes or where there is a lawful requirement to do so.

Top of Page

Call Recording

We use an Auto Attendant System to help direct you to the right department.

We also record all calls both from and to the surgery for training and monitoring purposes. If you would like any more information about this please e-mail the surgery at, hrwccg.mayfordsurgerysecretaries@remove-this.nhs.net or call the surgery.

Top of Page

Research and Planning

This practice is supporting vital health and care planning and research by sharing your data with NHS Digital. For more information about this see the GP Practice Privacy Notice for General Practice Data for Planning and Research.

You have the choice to opt out if you wish to, please see Research and Planning Opt Out.

Top of Page

Healthy.IO - ACR project for patients with Diabetes

The data is being processed for the purpose of delivery of a programme, sponsored by NHS Digital, to monitor urine for indications of chronic kidney disease (CKD) which is recommended to be undertaken annually for patients at risk of chronic kidney disease e.g., patients living with diabetes. The programme enables patients to test their kidney function from home. We will share your contact details with Healthy.io to enable them to contact you and confirm that you wish them to send you a test kit.  This will help identify patients at risk of kidney disease and help us agree any early interventions that can be put in place for the benefit of your care. Healthy.io will only use your data for the purposes of delivering their service to you. If you do not wish to receive a home test kit from Healthy.io we will continue to manage your care within the Practice. Healthy.io are required to hold data we send them in line with retention periods outlined in the Records Management code of Practice for Health and Social Care. Further information about this is available at http://bit.ly/uACRtest.

Top of Page

Enhanced Data Sharing Model

If you are being looked after by another health care provider who operate the same medical software as us, SystmOne, you can give permission for that provider to share their information with us, or for us to share our information with them. You have to opt in to this and it will not happen without you being asked when you attend the surgery or the other provider.

Please read Patient Guide on eDSM for further information.

Top of Page

Freedom of Information

Information available from Mayford House Surgery under the Freedom of Information Act model publication scheme can be obtained from our Practice Manager.

Top of Page

NHS Summary Care Records

As part of a mandatory, national programme each GP Practice will have to make a summary care record for each patient (unless the patient has already opted out).

If you wish to opt out download and complete the opt out form and return to the Practice (see below).

Information Website

Read about Summary Care Recordson the NHS Digital website.

Information Leaflets & Opt Out Form

Top of Page

Transferring Your Electronic Health Record

Your GP practice holds copies of your patient health record electronically and in paper format. Both contain the healthcare information about you that your GP needs including your medical history, medications, allergies, immunisations and vaccinations.

If you have previously registered with a different GP in England, upon registering at this practice your electronic health record will, where possible, be transferred automatically from your previous practice through the use of an NHS system called GP2GP.

Transferring Your Electronic Health Record information leaflet.