1. Introduction

The Chislehurst GP, trading name of South London Medical LLP (SLM) (“we”, “us”, “our”), respects your privacy and is committed to protecting your personal data.

This privacy policy explains how we collect, use, store and protect personal information when you:

  • Attend consultations or medical services
  • Contact us by phone, email or website
  • Book appointments
  • Use our website

We process personal data in accordance with:

  • UK GDPR
  • Data Protection Act 2018
  • Professional guidance from regulatory bodies such as the GMC

2. Data Controller

The data controller responsible for your personal data is:

South London Medical LLP

If you have questions regarding data protection, please contact us using the above details.

3. Types of Personal Data We Collect

We may collect and process the following categories of data:

Personal identification data

  • Name
  • Date of birth
  • Address
  • Telephone number
  • Email address
  • Identification documents

Health data (special category data)

Healthcare services require us to collect sensitive medical information including:

  • Medical history
  • Symptoms and diagnoses
  • Consultation notes
  • Prescriptions
  • Test results
  • Referral letters
  • Treatment records

Administrative and operational data

  • Appointment bookings
  • Billing and payment records
  • Communications with the clinic
  • Feedback or survey responses

Website data

  • IP address
  • Browser type
  • Website usage information (via cookies)

4. How We Collect Your Data

We collect personal data:

  • Directly from you during consultations or bookings
  • Through our website forms
  • Via telephone or email correspondence
  • From other healthcare providers (with consent)
  • From insurance providers or employers where applicable

5. Lawful Basis for Processing

We process personal data under the following lawful bases:

Contract

Processing necessary to provide healthcare services you have requested.

Healthcare provision

Processing necessary for medical diagnosis and treatment.

Legal obligation

Processing required by law, regulation, or regulatory bodies.

Legitimate interests

Processing necessary for:

  • Clinical governance
  • Quality assurance
  • Service improvement
  • Fraud prevention

6. How We Use Your Personal Data

Your data may be used for:

  • Providing medical consultations and treatment
  • Managing appointments and communications
  • Issuing prescriptions
  • Referrals to specialists
  • Diagnostic testing
  • Clinical governance and audit
  • Billing and payment processing
  • Responding to complaints or legal claims

7. Sharing Your Data

We may share personal data with:

Healthcare providers

  • Specialists
  • Hospitals
  • Laboratories
  • Radiology providers

Administrative service providers

  • IT and software providers
  • Payment processors
  • Practice management systems

Regulators and authorities

Where required by law or regulatory requirements.

Your NHS GP

Where appropriate and with your consent.

We ensure that third parties process personal data securely and in accordance with data protection laws.

8. Data Retention

Medical records are retained in accordance with UK healthcare guidance.

Typically:

  • Adult records: minimum 8 years after last treatment
  • Children’s records: until age 25 or 8 years after last treatment

Administrative records may be retained for shorter periods where appropriate.

9. Data Security

We implement appropriate technical and organisational measures including:

  • Secure electronic medical record systems
  • Encrypted communications
  • Access controls
  • Staff confidentiality training

10. Your Rights

Under UK data protection law you have the right to:

  • Access your personal data (Subject Access Request)
  • Correct inaccurate data
  • Request deletion in specific circumstances where deemed appropriate due to inaccuracies
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent where processing relies on consent

11. Complaints

If you are unhappy with how we handle your data, please contact us first.

You also have the right to lodge a complaint with:

Information Commissioner’s Office (ICO)
www.ico.org.uk

12. External Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites.

13. Changes to this Policy

We may update this privacy policy periodically. The most current version will always be available on our website.