Privacy Statement

This Privacy Policy lays out the basis on which we access, preserve, report and handle any personal data we receive from you, or that you send to us. Please read carefully the following to understand our views and practices about your personal data, how we intend to treat it and your rights about that data. By providing us with your personal data or using our services, websites or other online or digital platform(s) you agree or consent to the practices described or referred to in this Privacy Policy.

Information We Collect
At Orchard 2000 Group, we collect personal information to better care for you. Personal data is any information about a living, identifiable person. Your personal data is any information that can be attributed to you personally, including but not limited to your name, height, weight, date of birth, health conditions and medical care you receive or have received. Organisations which make use of personal information must do so in accordance with the provisions of the Data Protection Act. The Act applies to personal data held in both electronic and physical media.

We collect personal information from you when you:

Register to be a patient and therafter when you interact with our services
following attendances at NHS or health partner facilities for scheduled or unsceduled episodes of care
Join our Patient Group
If you apply for a position with us, during the recruitment process.
Use any of our services.
Complete a survey form for us.
Contact us by email, phone or social media.
Engage in any of the interactive features of our Website.

The information we collect from you helps us to personalize and continually improve your experience when using our site. You have the option of not providing certain information.

Why We Collect Your Information
We use your records and information to:

Provide you with the information, products or services you ask of us
See to it that your care is safe and effective
Work together for those providing you with care
Respond to your requests when we are obliged to do so
Check the quality of care you have received
Ensure that our Website’s content is provided to you in the most efficient manner
Collect data regarding public health matters

How Long Do We Keep This Information For?
Records are maintained in compliance with the Health and Social Care Department's nationwide guidelines and the Health and Social Care Records Management Code of Conduct 2016. In keeping up with this code of practice, records including confidential information are securely destroyed.

Lawful Basis for Keeping Your Information
In accordance with the data protection law, a lawful basis must be established to process your information. This lawful basis includes at least one of the following:

performance of a contract
legal obligation
for the protection of our and your vital interest
legitimate interest and or
with your consent

Having analysed and taken into account your interests, rights and freedoms, we collect your personal information for a variety of valid purposes as set out in this Privacy Policy.

Unless you agree otherwise, your personal information will only be used for the purpose for which it was intended and in accordance with our Privacy Policy, clinical records retention periods, applicable data protection laws, and clinical confidentiality guidelines.

Who We Share Your Personal Data With
We may share your information with staff in other organizations for the purpose of delivering or improving healthcare or in instances where there is a legal requirement for us to do so. Such organisations include but are not limited to:

Health authorities
Other NHS organisations
General practitioners (GPs)
Ambulance services
Social services
Education services
Local authorities
Police
Department for Work and Pensions
Clinical commissioning groups
Voluntary sector providers and private sector providers.
Other NHS common services agencies such as primary care agencies

This is in accordance with data protection laws and guidelines of professional bodies or for the purpose of clinical audits and research (unless you object).

Security of Your Information
We do not sell your information to third parties, and we only share it with organisations that are involved delivering healthcare or supporting the delivery of your healthcare. Information is kept on our secure network and our emails are encrypted.

Use of CCTV
Records from CCTVs (video and audio recordings) may be used for the prevention and detection of crime. Images may be shared with the Police for the investigation of crimes. Where CCTV is in operation, we comply with all legislation - including secure storage

Your rights
You have the following rights in relation to your personal data

You have the right to request to obtain a copy of details of your personal information.
You have the right to have correct any inaccurate information about your personal data
You have the right to request that your personal information is only used for restricted purposes
You have the right to have certain personal information about you erased
You have the right to object to sharing of your personal information at any time.

You have the right to withdraw consent you have previously given to us to handle your personal information. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information prior to the withdrawal of your consent.

Please note that your rights are not absolute. There are instances in which they do not apply. However, we will inform you of instances in which they do not apply in our correspondence with you and let you know whether we will be able to comply with your request. If you want to exercise your rights in respect of your personal data, the best way to do so is to contact the Practice Manager.

How Do I Raise a Concern?
If you are not satisfied with how we handle your request, you can contact the Information Commissioner’s Office, the UK's independent body set up to uphold information rights on 0303 123 1113 or visit their website (https://www.ico.org.uk)

Supplementary Privacy Notice

ORCHARD 2000 MEDICAL PRACTICE

Information for patients explaining how health and social care organisations may use your Summary Care Record information within the health and social care system to protect you and others during the coronavirus (COVID-19) outbreak.

Your information and responding to coronavirus (COVID-19)

The health and social care system is facing significant pressures due to the coronavirus outbreak. Health and care information is essential to deliver care to individuals, to support health and social care services and to protect public health. Information will also be vital in researching, monitoring, tracking and managing the outbreak. In the current emergency, it has become even more important to share health and care information across relevant organisations.

This notice describes how GPs and other health and social care organisations may use your information within the health and social care system to protect you and others during the Coranavirus (COVID-19) outbreak with regard to your Summary Care Record.

Summary Care Records
All patients registered with a GP have a Summary Care Record, unless they have chosen not to have one. The information held in your Summary Care Record gives registered and regulated healthcare professionals, away from your usual GP practice, access to information to provide you with safer care, reduce the risk of prescribing errors and improve your patient experience.
Your Summary Care Record contains basic (Core) information about allergies and medications and any reactions that you have had to medication in the past.

Some patients, including many with long term health conditions, previously have agreed to have Additional Information shared as part of their Summary Care Record. This Additional Information includes information about significant medical history (past and present), reasons for medications, care plan information and immunisations.

Change to information held in your Summary Care Record
In light of the current emergency, the Department of Health and Social Care has removed the requirement for a patient’s prior explicit consent to share Additional Information as part of the Summary Care Record].

This is because the Secretary of State for Health and Social Care has issued a legal notice to healthcare bodies requiring them to share confidential patient information with other healthcare bodies where this is required to diagnose, control and prevent the spread of the virus and manage the pandemic. This includes sharing Additional Information through Summary Care Records, unless a patient objects to this.

If you have already expressed a preference to only have Core information shared in your Summary Care Record, or to opt-out completely of having a Summary Care Record, these preferences will continue to be respected and this change will not apply to you. For everyone else, the Summary Care Record will be updated to include the Additional Information. This change of requirement will be reviewed after the current coronavirus (COVID-19) pandemic.

Why we have made this change
In order to look after your health and care needs, health and social care bodies may share your confidential patient information contained in your Summary Care Record with clinical and non-clinical staff in other health and care organisations, for example hospitals, NHS 111 and out of hours organisations. These changes will improve the healthcare that you receive away from your usual GP practice.

Your rights in relation to your Summary Care Record Regardless of your past decisions about your Summary Care Record preferences, you will still have the same options that you currently have in place to opt out of having a Summary Care Record, including the opportunity to opt-back in to having a Summary Care Record or opt back in to allow sharing of Additional Information.

You can exercise these rights by doing the following:

Choose to have a Summary Care Record with all information shared.
This means that any authorised, registered and regulated health and care professionals will be able to see a detailed Summary Care Record, including Core and Additional Information, if they need to provide you with direct care.

Choose to have a Summary Care Record with Core information only.
This means that any authorised, registered and regulated health and care professionals will be able to see limited information about allergies and medications in your Summary Care Record if they need to provide you with direct care.

Choose to opt-out of having a Summary Care Record altogether.
This means that you do not want any information shared with other authorised, registered and regulated health and care professionals involved in your direct care.

You will not be able to change this preference at the time if you require direct care away from your GP practice. This means that no authorised, registered and regulated health and care professionals will be able to see information held in your GP records if they need to provide you with direct care, including in an emergency.

This privacy notice supplements your GP practice's main privacy notice.

Changes to this privacy notice
This notice may be amended at any time, so please review it frequently. The date at the top of this page will be amended each time this notice is updated.

Privacy Statement

Covid-19

Supplementary Privacy Notice