GDPR Privacy Notice 2018

The Upstairs Surgery Practice Privacy Notice

The Upstairs Surgery has a legal duty to our patients to explain how we use any personal information we collect about you as a registered patient at our practice. Staff at this practice maintains records about your health and the treatment you receive in electronic and paper format.


Information such as personal details, including name address, next of kin, records of appointments and telephone calls, your health records, treatment and medications, test results, x rays etc., and any other information which enables us to deliver efficient patient care.


Your data is collected for the purpose of providing healthcare services. However, we can discuss this information if it is required by law. If you give consent or if it is justified in the public interest, the practice may be requested to support research, however, we will always gain your consent before sharing your information.

In accordance with the Health and Social Care Act 2012 the care data programme enabled patient data to be collected by the health and social care information centre (HSCIC) for quality and safety purposes. In addition it is possible for us to share your data with other healthcare providers in order to provide you with a high quality of care.


We are committed to maintaining confidentiality and protecting the information we hold about you. We adhere to the Data Protection Act 1998(DPA), the NHS codes of confidentiality and security as well as the guidance issued by the information commissions office (ICO) You have the right to the information that we hold about you and if you would like to access this information, you will need to complete a SAR form and you will be given further information.


Your information may be shared if you have received treatment to determine which clinical Commissioning group (CCG) responsible for is paying for your treatment. This information may include your name, address, and treatment date. All of the information is held securely and confidentially. It will not be used for any other purpose or shared with any third parties.


Should you wish to opt out of data collection please contact a membr of staff who will able to explain how to do this and prevent the sharing of your data. This can be done by registering a type 1 opt out which prevents your information being shared outside this practice 


Contact via email:

Write to the practice manager or trainee practice manager :  FAO Diane Maskell / Louise Maskell –  Chadwell Heath Health Centre, Ashton Gardens, Chadwell Heath, Romford, Essex  RM6 6RT

Ask to speak to the Practice Manager or Trainee Practice Manager 

We regularly review our privacy policy and all updates will be published on our website

Access your records

Application for access to medical records (SAR)

Privacy Notice for Direct Care

Privacy Notice for Care Quality Commission

Privacy Notice for National Screening Programme

Privacy Notice for Payments

Privacy Notice for Summary Care Records

Privacy Notice for NHS Digital

Privacy Notice for Prescriptions

Privacy Notice for Public Health

Privacy Notice for Research

Privacy Notice for Risk Stratification

Privacy Notice for Safeguarding

Privacy Notice for Emergencies

Your Neighbourhood Professionals. Just a Click Away!
In receipt of the Mobility allowance? You may be entitled to a brand new car even if you cannot drive yourself. Contact a local motability garage today. Dyna Care Services