Introduction

By law, all organisations that use personal information (personal data) must provide a clear description of how it is used and also provide any related information to ensure the processing is carried out lawfully and fairly. Your GPs main Privacy Notice is available on their website (or please contact their reception).

The additional information provided below describes only the use of your information when you use your GPs online consultation service.

This privacy notice only covers the OneContact platform, please ensure you read your GPs main Privacy Notice and if wish to fully understand how your data is used by your GP practice

OneContact

Your GP Practice has engaged a specialised online consultation supplier which is approved to NHS England standards and has gone through stringent scrutiny and achieved all necessary requirements to provide Online Consultations. One of a number of NHS organisations will have contracted with the supplier for this system. However, the contracting organisation will not receive any of your information, so your GP remains responsible for your data and will ensure that any data you provide to use this service is used for the online consultation purposes only.

The name of the organisation we have engaged to provide this service is Primary Care IT Ltd (platform OneContact), who will act as a Processor of your personal data under GDPR.

Legal basis for data sharing

The following legal basis set out in the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018 allow your GP to use your information when you use this online consultation service provided by them:

  1. When using your Personal Information (Personal Data):Article 6 (1) (e) of the GDPR, which permits us to process your personal information that is necessary to provide a service which is in the public interest
  2. When using your Sensitive Personal Information (Sensitive Personal Data):Article 9(2) (h) of the GDPR which permits us to process your health information which is necessary for the provision of health treatment.

What are the purposes of the processing?

Online consultations allow the GP’s patients to contact the Practice without having to use the telephone or take come into the practice in person. Online consultations enable patients to use a secure online system to ask questions, report symptoms and the medical team can then respond with appropriate advice.

What personal information is used?

In order for your medical team to understand your problem, and get enough information about it to decide how best to help you, they need to collect enough information to:

  • Accurately identify you
  • Take details of your request
  • Collect further information about your symptoms or situation.

If they were prevented from collecting this essential information, then they would be unable to provide the service securely and confidentially.

Information which is not needed for the service is not collected by OneContact.

IF YOUR GP PRACTICE IS IN ENGLAND:

Your GP uses the following information to identify and deal with your request.

  1. Identity and Contact Information: includes name, gender, date of birth, NHS number, email address and telephone number, postal address. If you have created an NHS login account you will already have verified who you are and you can, if you wish, use those details from your NHS login account to save you time and avoid having to manually enter your details to re-identify yourself to use the Online Consultation service.
  2. Special Categories of Personal Information: your health information such as your symptoms, conditions, medication and other details which are already held in your GP records and / or which you provide through the online consultation process.

IF YOUR GP PRACTICE IS IN WALES, SCOTLAND OR NORTHERN IRELAND:

Your GP uses the following information to identify and deal with your request.

  1. Identity and Contact Information: includes name, gender, date of birth, NHS number, email address and telephone number, postal address.
  2. Special Categories of Personal Information: your health information such as your symptoms, conditions, medication and other details which are already held in your GP records and / or which you provide through the online consultation process.
    Please refer to your GP Practice’s main Privacy Notice for any further information.

DO WE SHARE YOUR PERSONAL INFORMATION?

YOUR GP CONTROLS YOUR INFORMATION

For GP Practices in England, NHS England confirms that they will only use your information to provide you with health services.

For GP Practices in Wales, Scotland and Northern Ireland, please refer to the individual GP Practice’s main Privacy Notice in relation to the use of your information.

As mentioned earlier, your GP has engaged Primary Care IT, a specialised organisation to provide this online consultation service on their behalf, so your personal data will be shared with them in order for them to provide this service to you.

If you are advised to seek urgent care, your information will not be shared with other health and care providers. 

Where is your information processed and stored?

It is processed and stored within the United Kingdom.

How long is your information kept?

Your GP practice sets the retention periods for your information and instructs Primary Care IT, their engaged contractor that provides this service on your GP practice’s behalf, to comply with these periods.  When your information has been copied to your GP’s own systems then your sensitive information will be deleted by Primary Care IT. Primary Care IT retain your contact details (name, email) for up to 5 weeks, in order to facilitate communication relating to the consultation, after which they are automatically deleted.

If you have been advised online to seek urgent care elsewhere, then your information will not be transferred to us and will not be retained after you have read the advice given.