Privacy Policy
Privacy Policy – Cotswold Private GP Service Limited
Introduction
We at Cotswold Private GP Service Limited are committed to protecting your privacy. When we process your data, we are required to comply with the Data Protection Act 2018 (DPA) and the UK General Data Protection Regulation (UK GDPR). Together, these are referred to as the Data Protection Legislation.
Your personal data includes any information that identifies you or relates to you — for
example: your name, email address, postal address, date of birth, location data, and in some
cases, opinions we document about you. It also includes special categories of data, such as
your medical and health records, and potentially data regarding your religious beliefs,
ethnicity, sexual orientation, and political views.
Any action we take with your personal data — including collecting, storing, amending,
sharing, or deleting it — counts as “processing.” We are committed to handling your data in
accordance with the Data Protection Legislation.
This privacy policy explains what personal data we process, why we process it, and how we
handle it.
Our Responsibilities
Cotswold Private GP Service Limited is the data controller for the personal data you provide.
We have a nominated individual to be responsible for ensuring compliance with data
protection legislation and for managing requests from individuals exercising their data
rights.
What Personal Data Do We Process?
We process your personal data for various purposes depending on your relationship with us.
These purposes include delivering our services, fulfilling contractual obligations,
corresponding with you, and meeting legal or regulatory requirements.
If we are unable to collect certain personal data, we may not be able to provide our services
to you or comply with our obligations.
For Patients
Data we may process includes:
Identity Data: name, title, date of birth, gender, marital status
Contact Data: address, email address, telephone numbers
Financial Data: payment card details, bank information
Special Category Data: health records, medical history, race and ethnicity, diversity
information
Other Data: opinions about you, opinions provided by you, and any data from which
we derive insights
Legal bases for processing may include:
Your consent
Performance of a contract
Our legitimate interests (e.g. managing appointments and care)
Legal obligations
Processing for the provision of healthcare services
We process this information based on our legitimate interests or to meet legal obligations. If you provide any special category data, we rely on your explicit consent, which you may withdraw at any time.
Who Will Receive Your Personal Data?
We only share your data when necessary. Potential recipients include:
Regulatory bodies
IT or records management providers
Third-party health professionals (when required for care)
We do not transfer your personal data outside the UK or EEA.
Your NHS GP with your consent
How Long Do We Keep Your Data?
We retain your personal data only as long as necessary for the purposes for which it was
collected. Specific retention periods vary depending on the data type and legal
requirements.
After this period, data will be securely deleted or destroyed.
Your Data Protection Rights
Under the Data Protection Legislation, you may have the following rights:
1. Access – to confirm whether we process your data and obtain a copy
2. Rectification – to request correction of inaccurate or incomplete data
3. Erasure – to request deletion in certain circumstances (“right to be forgotten”)
4. Restriction – to request suspension of processing under specific conditions
5. Portability – to request your data in a structured, machine-readable format
6. Objection – to object to processing based on legitimate interests or for direct
marketing
7. Withdraw Consent – where we rely on your consent, you may withdraw it at any
time
Please note that these rights are not absolute and may be subject to legal exceptions.
Automated Decision-Making
We do not carry out any automated decision-making using your personal data.
Complaints
If you believe your data has been processed unlawfully or your rights have been infringed,
please contact us so we can resolve the issue.
You may also lodge a complaint with the Information Commissioner’s Office (ICO):
Phone: 0303 123 1113
Contact Us
If you have any questions about how we process your data or want to exercise any of your
rights, please contact:
Dr Sunil Srivastava,
Director & Registered Manager,
Cotswold Private GP Service Limited
P-20 Cheltenham Film Studio
Arle Court, Hatherley Lane,
Cheltenham
GL51 6PN
enquiries@cotswoldprivategp.co.uk
+44 7767 171580
