Privacy Notice

Please view our Privacy Statement.

There are a number of factors to the GDPR (General Data Protection Regulation) that changes how companies communicate with users and process their personal information.

One fundamental factor is privacy notices – how organisations explain at the point of data collection what users can expect will happen to their data. A privacy notice is part of obtaining consent from the user (or telling them about legitimate interests, for example), and is presented at the point of data collection.

The GDPR demands clarity through a privacy notice

This is what the GDPR has to say about the information companies provide about personal data processing – it must be:

  • concise, transparent, intelligible and easily accessible;
  • written in clear and plain language, particularly if addressed to a child; and
  • free of charge.

As the ICO puts it (ICO: Guide to Data Protection) when discussing the GDPR, “being transparent by providing a privacy notice is an important part of fair processing. You can’t be fair if you are not being honest and open about who you are and what you are going to do with the personal data you collect.”

What’s more, the information you should provide is changing, too. The lawful basis for your data processing, how long you’ll keep the data for, the user’s right to complain – these are all pointed to in the GDPR.

The following questions should be considered when writing a privacy notice:

  • What information is being collected?
  • Who is collecting it?
  • How is it collected?
  • Why is it being collected?
  • How will it be used?
  • Who will it be shared with?
  • What will be the effect of this on the individuals concerned?
  • Is the intended use likely to cause individuals to object or complain?

Studholme Medical Centre Privacy Notices

Please note Data Controller has now be confirmed as Mr Daniel Lorusso. His contact details are : or on 07917 093042.

Quality Care Commission

Privacy Notice for Care Quality Commission


Privacy Notice for Emergencies

Direct Care

Privacy Notice for Direct Care

National Screening Programs

Privacy Notice for National screening programs

Summary Care Record

Privacy Notice for Summary Care Record

NHS Digital

Privacy Notice for NHS Digital

Public Health

Privacy Notice for Public Health

Medical Research

Privacy Notice for Research

Risk Stratification

Privacy Notice for Risk Stratification


Privacy Notice for Safeguarding


Privacy Notice for Demographics

Home ACR Testing Service

ACR project for patients with diabetes

This practice is working with a company called to provide a pilot programme sponsored by NHS Digital to monitor urine albumin:creatinine ratio (ACR) annually for patients with diabetes. This enables patients with diabetes to test their kidney function from home. With your permission, we will share your contact details with to enable them to contact you and send you a test kit. This will help identify those at risk of kidney disease and proactively manage early interventions for the benefit of patient care. If you do not wish to be contacted by, you will have the opportunity to say so by replying to the text message sent from our practice and when you will be contacted by onboarding team.