Tudor Gate Surgery is committed to protecting your personal data and ensuring confidentiality in accordance with the UK General Data Protection Regulation, also known as UK GDPR, the Data Protection Act 2018, and the Freedom of Information Act 2000.

When we may share information about you

We only share identifiable information about you in the following circumstances:

  • To provide further medical treatment, for example from district nurses or hospital services
  • To help you access other services such as social services. This requires your consent
  • When we have a duty to protect others, such as in child protection cases
  • Anonymised data may be used at local or national level to help the Health Board or Government plan services, for example diabetic care. This data does not identify individuals.

If you do not wish your anonymised information to be used in this way, please inform us.

Welsh GP Record

Your Welsh GP Record is a summary of key medical information taken from your full GP record and made available to selected health professionals in Out of Hours and certain secondary care settings.

It includes:

  • Your name, address and contact details
  • Current medications and prescriptions from the past two years
  • Any allergies or adverse reactions
  • Current medical problems or diagnoses
  • Recent test results from within the previous year, such as blood tests or X-rays

It does not include any private discussions with your GP.

More information is available on request from the surgery.

Read about the Welsh GP Record
How we use your information

We use your medical record to provide safe, effective healthcare and treatment, including:

  • Diagnosing and managing your health
  • Referrals to hospital or specialist care
  • Prescriptions to your preferred pharmacy
  • Checking the quality of care through audits and reviews

We only share relevant information when it is necessary to provide your care or when legally required.

Read our Privacy Notice
Your rights under GDPR

You have several rights under data protection law, including the right to:

  • Access your medical records
  • Request corrections to inaccurate information
  • Object to certain uses of your data, although this may affect your care
  • Withdraw consent where it has previously been given

You may make a Subject Access Request, also known as a SAR, to view your medical records.

More information is available in our GDPR SAR leaflet.

Safeguarding

We may need to share personal data without your consent when it is required to:

  • Protect individuals from harm
  • Meet safeguarding responsibilities

These decisions are made under strict legal and professional frameworks.

Management of records

We follow strict procedures in line with records management guidance to ensure that we keep the right information at the right time to make informed healthcare decisions.

This includes:

  • Paper and electronic documents
  • Emails
  • Audio and video recordings
  • X-rays
  • CCTV footage

We are committed to maintaining high standards through policies that support information governance and legal compliance.

Call recording and CCTV
  • All calls to and from the surgery are recorded for training and quality purposes.
  • CCTV is in use to support crime prevention and safety.
Information governance and access

We comply with the Freedom of Information Act 2000, which entitles you to request certain non-confidential information held by the surgery.

Our Publication Scheme outlines routinely available information and how it can be accessed.

For Freedom of Information requests or information governance enquiries, please contact the Practice Manager.

Complaints and further support

If you have concerns about how your data is used or wish to make a complaint, contact the Information Commissioner’s Office.

Information Commissioner’s Office
Website: ico.org.uk/global/contact-us
Telephone: 0303 123 1113

Data protection contacts

Data Controller: Dr H. S. Neville
Data Protection Officer: Mrs S. M. Lapping, Practice Manager