Privacy Notice

Posted on:

Effective Date: 10th July 2025
Review Date: 9th July 2026

1. Introduction

At The Chowdhury Practice, we are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, and share your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and NHS guidelines.

2. Data Controller

The Chowdhury Practice is the Data Controller for the personal data we process.
Contact Details:
The Chowdhury Practice
The Integrated Care Centre

New Radcliffe Street

Oldham

OL1 1NL
Tel: 0161 271 3150
Email: chowdhurypractice@nhs.net
Website: The Chowdhury Practice – Integrated Care Centre, New Radcliffe Street, Oldham, OL1 1NL

3. Data Protection Officer (DPO)

Our DPO is responsible for overseeing data protection compliance.
DPO Contact: Jane Hill LMC Data Protection Office
Email: Jane.hilldpo@nhs.net

4. What Information We Collect

We collect and process the following types of personal data:

  • Name, address, date of birth, NHS number
  • Contact details (phone, email)
  • Medical history, treatment records, test results
  • Emergency contact and next of kin
  • Ethnicity, religion, and other sensitive data (where relevant)

5. Why We Collect Your Data

We use your data to:

  • Provide you with direct care and treatment
  • Refer you to other healthcare providers
  • Manage and audit our services
  • Support health research and planning (with safeguards)
  • Fulfil legal and regulatory obligations

6. Lawful Basis for Processing

We process your data under the following legal bases:

  • Article 6(1)(e) – Public task (provision of healthcare)
  • Article 9(2)(h) – Provision of health or social care

7. Sharing Your Information

We may share your data with:

  • NHS organisations (e.g. hospitals, community services)
  • Local authorities and social care providers
  • Pharmacies and laboratories
  • External IT providers (under strict contracts)
  • National screening programmes
  • Law enforcement (where legally required)

We will never sell your data or use it for marketing without your consent.

8. Your Rights

You have the right to:

  • Access your data
  • Request correction or deletion
  • Object to processing
  • Restrict processing
  • Data portability (where applicable)
  • Lodge a complaint with the ICO

To exercise your rights, contact the practice or our DPO.

9. How We Store Your Data

Your data is stored securely on NHS-approved systems. We retain your records in line with NHS retention schedules and delete them securely when no longer needed.

10. Updates to This Notice

We may update this notice to reflect changes in law or practice. The latest version will always be available on our website and in the practice.