Introduction

The Data Protection Regulations in the UK include two key pieces of law:

There are other regulations in specific areas which need to be taken into account. This Privacy Notice has been written within the legislative framework as at August 2026. It will be revised as the framework and case law change.  This notice was last updated August 2026.

 

What is this Privacy Notice about? 

This Privacy Notice is part of the information to data subjects about how personal data is used. Being transparent and providing accessible information to individuals about how organisations will use their personal information is a key element of Data Protection Regulations. 

This Privacy Notice is part of our programme to make the data processing activities we are carrying out in order to meet our healthcare obligations transparent.

The Privacy Notice tells you about information we collect and hold about you, the legal basis for collecting and holding the information, what we do with it, how we keep it secure (confidential), who we might share it with and what your rights are in relation to your information.

 

Who we are

Ridgmount Practice (formerly Gower Place Practice) is a friendly, caring & innovative practice.

We are a partnership based close to University College, London (UCL) in a purpose-built Health Centre which we rent from UCL. 

Our patient list size is approximately 17,000 patients; over 80% of patients are students of UCL. The remainder is a mixture of local hospital staff and local residents. 

Our workload is closely linked to the University term-time. In late September and early October, we are particularly busy when the new students start, we register approximately 3000 new patients. 

We are a GMS practice. Our medical system is EMIS WEB. We are part of Camden Clinical Commissioning Group. We are lab-linked with UCLH (our hospital provider). Our practice is connected to the NHSnet/Internet and we use Microsoft Outlook for e-mail correspondence. We use the accuRx texting system. We refer patients through NHS e-Referral Service

The practice is fortunate to have a highly motivated and loyal team. There is a core of practice staff who have been employed at the Practice for more than 5 years. This is extremely beneficial as it creates an atmosphere of continuity in patient care and provides a pool of experience that ensures stability throughout the practice.

We are a training practice.

A weekly clinical meeting is held at the practice in protected time which all the doctors and nurses attend. During this time, we discuss significant event analyses, recent courses or updates, new guidelines and any patients who are causing concern. In addition, we have regular general meetings for all team members which are minuted. 
We participate in the Prescribing Quality Scheme for Camden CCG and fulfill their criteria in prescribing quality and audits to score maximum points.
We are an active member of a Camden GP Federation and also collaborate with other local practices. We are also members of the Camden Central Primary Care Network (PCN).
We are committed to high quality clinical practice and score high QOF points, participate in the long-term conditions programme and try to also let the patients’ priorities be heard. We have an active Patient Participation group.  The doctors and nurses each take a clinical area of responsibility in QOF clinical domains, and the Practice Manager and IT manager are principally involved in the non clinical domains.

Special Interests and Posts

  • Dr Claire Elliott - Clinical Teaching Fellow in Primary Care (Medical Humanities) UCL, GP Appraiser, Women’s Health, Sexual Health, and Child Health
  • Dr Mark Barrett - PCN Lead Diabetes Lead
  • Dr Sarah Jane - GP Trainer, Certificate in Teaching the Teachers, Medical Ethics
  • Dr Latha Kuna - Diabetes, GP Appraiser 
  • Dr Emily Attree - Women’s Health, Sexual Health, Minor Surgery, Surgical Problems 
  • Dr Sophia Bryant - Women’s Health including IUD & Implant fittings, Adult & Child Health
  • Dr Jennifer Saw - Substance Misuse, Coach and Mentor, Learning Disabilities and Autism
  • Dr Charlotte Dickens - Dermatology, ENT
  • Nurse Dee Williams - Nurse Prescriber, Sexual Health and Travel medicine 
  • Nurse Enmin Zhang - Nurse Prescriber, Asthma & COPD 
  • Nurse Helen Jenkins - Nurse Prescriber, Diabetes 
  • Physician Associates: Nasra Yusuf, Sarah Farooqi, Safaa Abukar
  • Clinical Pharmacist: Nabir Miah
  • First Contact Physio: Shweta Kadam
  • CamdenTalking Therapies: Celine Ruud

The doctors share the on-call rota during the weekdays from 8am to 6.30pm. At other times, LCW covers out of hours calls. 

 

Data Protection Officer

Our Data Protection Officer (DPO) provides independent advice and oversight regarding how we process personal information.

For data protection enquiries please contact:

Data Protection Officer

  • Name: Steve Durbin
  • Email: nclicb.dpo.ncl@nhs.net
  • Address: Please use the practice address above, marked for the attention of the Data Protection Officer.

You may contact the DPO with any concerns regarding the use of your personal information.

 

What Information We Collect

We collect and maintain information necessary to provide safe and effective healthcare.

This may include:

Personal Information

  • Name
  • Address
  • Date of birth
  • NHS number
  • Telephone number
  • Email address
  • Emergency contact details

Special Category Information

  • Medical history
  • Diagnoses
  • Test results
  • Medication records
  • Referrals
  • Treatment information
  • Mental health information where relevant
  • Information about ethnicity, religion, sexual orientation or other protected characteristics where relevant to healthcare delivery

Administrative Information

  • Appointment history
  • Correspondence
  • Complaints and feedback
  • Online consultation submissions
 

Why We Use Your Information

We use your data to:

Direct Patient Care

  • Diagnose and treat medical conditions
  • Arrange referrals
  • Prescribe medication
  • Provide preventive healthcare
  • Communicate with you regarding your care

Practice Administration

  • Manage appointments
  • Manage patient registrations
  • Investigate complaints
  • Maintain accurate records

Legal and Regulatory Requirements

  • Meet NHS contractual obligations
  • Comply with legal duties
  • Protect patients and staff
  • Support safeguarding obligations

Planning, Research and Population Health

Information may be used, in accordance with applicable law, for:

  • NHS planning
  • Public health activities
  • Clinical audit
  • Service evaluation
  • Approved research

Where appropriate, information will be anonymised or pseudonymised.

 

Lawful Basis for Processing

The legal basis for processing personal data under UK GDPR includes:

  • Article 6(1)(e): Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Practice.
  • Article 6(1)(c): Processing is necessary for compliance with legal obligations.
  • Article 9(2)(h): Processing of special category data is necessary for the provision of health or social care and the management of healthcare systems and services.

In certain circumstances we may also rely on your consent or another lawful basis where appropriate.

 

Who We Share Your Information With

To provide healthcare and meet NHS obligations we may share information with:

  • NHS hospitals
  • Community healthcare providers
  • Specialist services
  • Mental health services
  • Social care organisations
  • NHS England
  • Integrated Care Boards (ICBs)
  • Pathology and laboratory services
  • National NHS systems
  • Approved data processors providing services on our behalf

Our systems may include providers such as:

  • EMIS Web
  • AccuRx
  • NHS e-Referral Service
  • NHS communication platforms

Information is only shared where there is a lawful basis to do so and appropriate safeguards are in place.

 

National Data Opt-Out

The NHS may use confidential patient information for planning and research purposes.

You can choose whether your confidential patient information is used for these purposes by registering a National Data Opt-Out.

Further information about the National Data Opt-Out

Your direct care will not be affected by your decision.

 

International Transfers

We do not routinely transfer your personal information outside the United Kingdom.

If information is transferred outside the UK, appropriate legal safeguards and contractual protections will be applied to ensure your personal information remains protected.

 

How Long We Keep Your Information

We retain records in accordance with:

  • NHS Records Management Code of Practice
  • NHS England guidance
  • Statutory and regulatory requirements

Healthcare records may need to be retained for extended periods to support continuity of care and meet legal obligations.

 

Your Rights

Under UK GDPR you have rights relating to your personal information.

These include:

  • The right to be informed
  • The right of access to your records
  • The right to request correction of inaccurate information
  • The right to request restriction of processing in certain circumstances
  • The right to object to processing where applicable
  • Rights relating to automated decision-making where relevant

Some rights may be restricted where healthcare legislation requires us to retain or continue processing information.

 

Automated Decision-Making

Ridgmount Practice does not routinely make decisions about patients solely by automated means that have legal or similarly significant effects.

Should this change, patients will be informed accordingly.

 

Keeping Your Information Secure

We take the security of your information seriously and maintain appropriate technical and organisational measures to prevent:

  • Unauthorised access
  • Unlawful processing
  • Accidental loss
  • Destruction
  • Damage to personal information

Staff receive regular training regarding confidentiality and information governance.

 

Complaints

If you have concerns about how we use your personal information, please contact the Practice or our Data Protection Officer in the first instance.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO)

Visit the Information Commissioner's website