St.Katharine Docks Practice

Effective Date: 1 July 2026
Review Date: 1 July 2027

Introduction

St.Katharine Docks Practice is committed to protecting your privacy and keeping your personal information secure.

This Privacy Notice explains how we collect, use, store and share your personal information when you receive care and treatment from our Practice.

Who We Are

St.Katharine Docks Practice
12-14 Nightingale House
50 Thomas More Street
London E1W 1UA

St.Katharine Docks Practice is the Data Controller for the personal information we hold about our patients.

ICO Registration Number: Z160656X

Our Data Protection Officer

Sohifa Kadir
Interim IG Lead – GP Data Protection Officer
NHS North East London

Mobile: 07919 803218
Email: sohifa.kadir3@nhs.net

If you have any questions about how we use your information, please contact the Practice Manager or our Data Protection Officer.

Information We Collect

We may collect and hold information including:

  • Name, address and contact details
  • Date of birth and NHS number
  • Next of kin and emergency contact details
  • Medical history and health information
  • Appointment and consultation records
  • Prescriptions and medication information
  • Test results and clinical correspondence
  • Information relating to your treatment and care
  • Records of communications with the Practice

Telephone calls to the Practice may be recorded for training, monitoring, quality assurance and patient safety purposes.

Information We Receive From Other Sources

We may receive information about you from organisations involved in your care, including:

  • NHS hospitals and trusts
  • Community healthcare services
  • Mental health services
  • Social care services
  • Other GP practices
  • Care homes
  • Family members or carers acting on your behalf where appropriate

This information helps us provide safe, effective and coordinated care.

Why We Use Your Information

We use your information to:

  • Provide safe and effective healthcare
  • Maintain accurate medical records
  • Arrange appointments, referrals and follow-up care
  • Prescribe medicines and monitor treatment
  • Communicate with you regarding your healthcare
  • Safeguard children and vulnerable adults
  • Meet our legal and regulatory obligations
  • Support clinical audit, quality improvement and NHS service planning

Our Legal Basis

We process your information in accordance with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Common Law Duty of Confidentiality
  • Health and Social Care legislation

Our main lawful bases are:

  • Article 6(1)(e) – Public task
  • Article 9(2)(h) – Provision and management of health and social care

Who We Share Information With

Where legally permitted and necessary, we may share relevant information with:

  • NHS hospitals and trusts
  • NHS England
  • Community healthcare services
  • Primary Care Networks (PCNs)
  • Pharmacies
  • Mental health services
  • Social care providers
  • Local authorities
  • Ambulance services
  • Healthcare professionals directly involved in your care

Information is shared only on a need-to-know basis and in accordance with the law.

Data Processors

We use trusted third-party organisations to provide services on our behalf. These organisations are required to keep your information secure and confidential.

This includes:

  • Clinical system providers (such as EMIS)
  • IT support providers
  • Telephone and communications providers
  • Document management services
  • Appointment booking and messaging services
  • NHS-approved data hosting providers

These organisations may only process your information in accordance with our instructions and applicable data protection legislation.

GP Connect

The Practice uses GP Connect to allow authorised healthcare professionals involved in your care to access relevant information when required.

GP Connect is used solely to support your direct care.

Summary Care Record (SCR)

Your information may be included within the NHS Summary Care Record to support your care when you access services outside the Practice.

You can choose to opt out of having a Summary Care Record. Please contact the Practice for further information.

How Long We Keep Information

We retain patient records in accordance with the NHS Records Management Code of Practice and other legal requirements.

Records are kept only for as long as necessary and are securely destroyed when no longer required.

Keeping Your Information Secure

We use secure NHS-approved systems and processes to protect your information.

Access to patient records is restricted to authorised staff who need the information to carry out their work.

All staff receive regular confidentiality, information governance and data protection training.

International Transfers

Your information is normally stored and processed within the United Kingdom.

Where information is processed outside the UK, appropriate legal and security safeguards will be in place to protect it.

Your Rights

You have the right to:

  • Access the information we hold about you
  • Request correction of inaccurate information
  • Request restriction of processing where appropriate
  • Object to certain types of processing
  • Receive information about how your data is used
  • Request transfer of your information where applicable
  • Withdraw consent where consent is the legal basis for processing
  • Make a complaint about the handling of your information

To exercise any of these rights, please contact the Practice Manager.

National Data Opt-Out

You can choose whether your confidential patient information is used for research and planning purposes.

Choosing to opt out will not affect your care and treatment.

For further information:

Website: NHS Your Data Matters
Telephone: 0300 303 5678

Cookies

Our website uses cookies to improve functionality and user experience.

You can manage cookie settings through your web browser.

If you follow links from our website to another organisation's website, please review their privacy notice separately.

Complaints

If you have concerns about how your personal information has been handled, please contact the Practice Manager in the first instance.

You can also contact the Information Commissioner's Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: Information Commissioner's Office

Document Control

Item Details
Document Title Privacy Notice
Organisation St.Katharine Docks Practice
Effective Date 1 July 2026
Review Date 1 July 2027
Responsible Lead Practice Manager
Data Protection Officer Sohifa Kadir
Version July 2026