How we use your personal information
This Privacy Notice explains why Saltash Health Centre collects information about you, how that information is used, and your rights in relation to your personal data.
We are committed to protecting your privacy and ensuring that your personal information is handled fairly, lawfully, and securely.
Healthcare professionals providing your care maintain records about your health and any treatment or care you have received. These records may be electronic, paper-based, or a combination of both.
Maintaining accurate records helps us provide you with safe, effective, and appropriate healthcare.
Information We Hold About You
Your GP record may include:
- Your name, address, date of birth, NHS number and contact details
- Details of your next of kin, carers or legal representatives
- Information about appointments, consultations and contacts with the practice
- Notes and reports relating to your health and wellbeing
- Details of diagnoses, treatments and care provided
- Prescriptions and medication history
- Results of investigations such as blood tests, scans and X-rays
- Correspondence relating to your care
- Relevant information received from hospitals, community services, social care providers and other healthcare professionals
Why We Use Your Information
We use your information to:
- Provide direct care and treatment
- Arrange referrals and ongoing healthcare services
- Communicate with you about your care
- Maintain accurate medical records
- Monitor and improve the quality and safety of services
- Investigate complaints and concerns
- Meet our legal and regulatory obligations
- Plan and manage NHS services
Where possible, information used for planning, audit, research or statistical purposes will be anonymised or pseudonymised so that individuals cannot be identified.
Our Legal Basis for Processing Information
Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the Practice processes personal information under the following legal bases:
Article 6 UK GDPR
- Article 6(1)(e): Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Article 9 UK GDPR
- Article 9(2)(h): Processing is necessary for the provision of health or social care and the management of healthcare systems and services.
- Article 9(2)(i): Processing is necessary for reasons of public interest in the area of public health.
How We Keep Your Information Confidential
Everyone working within the NHS has a legal duty to keep information about you confidential.
We only share information about you when:
- It is necessary for your direct care and treatment
- You have given your consent
- The law requires us to do so
- There is an overriding public interest, such as safeguarding concerns or serious risks to health or safety
Any information shared is limited to the minimum necessary for the purpose.
Organisations We May Share Information With
To provide your care and meet our responsibilities, we may share information with:
- NHS hospitals and trusts
- Community healthcare providers
- Ambulance services
- NHS England
- Cornwall and Isles of Scilly Integrated Care Board (ICB)
- Other GP practices
- Pharmacies
- Dentists
- Opticians
- Independent healthcare providers involved in your care
- Social care services
- Local authorities
- Safeguarding services
- Voluntary sector organisations involved in your support
- Approved NHS data processors and IT service providers
All organisations receiving information are required to protect it appropriately and comply with data protection legislation.
Use of Heidi AI (Ambient Voice Technology)
Saltash Health Centre may use Heidi Health (“Heidi AI”), an Ambient Voice Technology (AVT) solution, to assist clinicians during consultations.
Heidi AI helps clinicians create consultation notes more efficiently by analysing information discussed during appointments and generating a draft clinical record.
How Heidi AI Works
During a consultation, Heidi AI may process information discussed between you and your clinician. This may include:
- Symptoms and medical history
- Information about your condition
- Treatment discussions
- Relevant healthcare information needed for your care
Heidi AI does not make clinical decisions or provide treatment. All notes generated by Heidi AI are reviewed, checked, amended where necessary, and approved by the clinician before being added to your medical record.
How Your Information Is Protected
Heidi Health acts as a Data Processor on behalf of the Practice.
Appropriate contractual, technical and organisational safeguards are in place to ensure that your information remains secure and confidential and is processed in accordance with UK GDPR, the Data Protection Act 2018 and NHS information governance requirements.
Your Choice
If you do not wish Heidi AI to be used during your consultation, please tell your clinician at the beginning of your appointment.
Choosing not to use Heidi AI will not affect the care or treatment you receive.
Risk Stratification
The NHS uses risk stratification tools to identify patients who may benefit from additional support or preventative interventions.
Information from your GP record may be analysed using approved NHS systems to help identify patients who are at risk of developing health problems or who may benefit from earlier intervention.
Where possible, information is de-identified during this process.
If you have concerns about your information being used in this way, please contact the Practice.
Medicines Management
The Practice works with healthcare professionals and NHS organisations to ensure patients receive safe, effective and cost-effective medicines.
Information within your medical record may be reviewed by authorised healthcare professionals involved in medicines optimisation services.
Devon and Cornwall Care Record
Saltash Health Centre participates in the Devon and Cornwall Care Record.
The Devon and Cornwall Care Record enables authorised health and social care professionals involved in your care to access relevant information from participating organisations.
This helps ensure that professionals have the information they need to provide appropriate care, particularly in urgent or emergency situations.
For more information visit:
https://www.devonandcornwallcarerecord.nhs.uk
OpenSAFELY
OpenSAFELY is a secure NHS platform used to support research, service evaluation, public health and healthcare planning.
Approved researchers can run analyses using pseudonymised patient information within secure NHS environments. Researchers cannot access information that directly identifies individual patients.
For more information visit:
National Data Opt-Out
The National Data Opt-Out allows patients to choose whether their confidential patient information is used for research and planning purposes.
The opt-out does not affect information used for your individual care and treatment.
You can find out more or manage your choice at:
https://www.nhs.uk/your-nhs-data-matters
or by calling NHS England on:
0300 303 5678
Your Information Rights
Under UK GDPR and the Data Protection Act 2018, you have rights in relation to your personal information.
These include:
- The right to be informed about how your information is used
- The right to access information we hold about you
- The right to request correction of inaccurate information
- The right to request restriction of processing in certain circumstances
- The right to object to particular types of processing
- The right to lodge a complaint with the Information Commissioner’s Office (ICO)
Accessing Your Records
You can request access to your medical records by contacting the Practice.
Requests can be made verbally or in writing.
In most circumstances we will respond within one month and there is normally no charge.
You may be asked to provide identification before information is released.
Keeping Your Information Up To Date
It is important that the information we hold about you is accurate and current.
Please inform us promptly if you change:
- Name
- Address
- Telephone number
- Email address
- Next of kin details
- Other important personal information
Cookies and Website Analytics
Our website uses cookies to support functionality and improve user experience.
We may use analytics services to collect anonymised information about how visitors use our website, including:
- Pages visited
- Browser type
- Device information
- Time spent on pages
This information helps us improve our website and services.
You can manage cookie preferences through your internet browser settings.
Who Is the Data Controller?
Saltash Health Centre
Callington Road
Saltash
Cornwall
PL12 6DL
Telephone: 01752 842281
Saltash Health Centre is the Data Controller responsible for ensuring that your personal information is processed lawfully and securely.
Data Protection Officer
The Practice has access to a Data Protection Officer (DPO) who provides advice and oversight regarding data protection compliance.
For information about the Data Protection Officer, please contact the Practice.
Complaints and Concerns
If you have any concerns about how your information is used, please contact:
Practice Manager
Saltash Health Centre
Callington Road
Saltash
PL12 6DL
Telephone: 01752 842281
If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: https://www.ico.org.uk
Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in legislation, NHS guidance or the services we provide.
The latest version will always be available on our website.
Last Updated: August 2026