Privacy notice

What information we hold

We keep a record for every registered patient, held securely in electronic and, where relevant, paper form. It may include:

• your name, address, date of birth, NHS number and contact details
• details of contacts with the practice, including appointments, consultations and online requests
• notes and reports about your health and treatment, including test results and medication
• information from other health and care professionals involved in your care
• relevant information from people who care for you and know you well, where appropriate

Why we use your information

We use your information to provide and coordinate your care, to check the quality and safety of the care we give, to meet our contractual and legal duties, and to help plan NHS services. Under UK GDPR our lawful bases are that processing is necessary for a task carried out in the public interest and in the exercise of official authority (Article 6(1)(e)), for the provision of health care and the management of health care systems (Article 9(2)(h)), and, where relevant, to comply with a legal obligation. Where we rely on your consent, for example for a non-NHS report, we will ask for it and you can withdraw it at any time.

Who we share it with

We share only what is necessary, and everyone we share with is bound by the same duty of confidentiality. We may share information with:

• hospital and community NHS services involved in your care
• other health and care professionals, such as district nurses, pharmacists and social care teams
• NHS North East London Integrated Care Board and NHS England, for commissioning and payment purposes
• national screening, immunisation and public health programmes
• other organisations where we have a legal duty, for example child protection or a court order

We do not sell your information, and we do not use it for marketing.

Choosing how your data is used

Confidential patient information is also used for research and planning. You can choose whether your information is used in this way through the national data opt-out at nhs.uk/your-nhs-data-matters. Your choice does not affect the care you receive.

How long we keep it

We keep records for the periods set out in the NHS Records Management Code of Practice. GP records are generally retained for the lifetime of the patient and for a set period afterwards, and are then securely destroyed.

Your rights

You have the right to:

• be informed about how we use your information
• request a copy of the information we hold about you
• ask us to correct information that is inaccurate or incomplete
• object to or restrict how your information is used, in some circumstances
• ask us to erase information, where there is no legal reason for us to keep it
• complain about how your information has been handled

To exercise any of these rights, contact the practice manager by email at nelondonicb.highamhill@nhs.net, by calling 020 8527 2677, or in writing to 258-260 Higham Hill Road, Walthamstow, London E17 5RQ. You can also view much of your record through the NHS App.

Data Protection Officer

The practice has a nominated Data Protection Officer. To contact them, write to the practice manager at the address above and mark your letter for the attention of the Data Protection Officer, or email nelondonicb.highamhill@nhs.net.

This website

This website does not ask you to create an account or submit health information. Basic technical information may be processed to keep the site secure and working. When you follow a link to our online consultation service, the NHS App or the NHS website, that organisation's own privacy notice applies. See our cookie information.

Raising a concern

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk.

This notice was last reviewed in August 2026.