Privacy Notice

Ivry Street Medical Practice takes privacy seriously and we want to provide you with information about your rights, who we share your information with and how we keep it secure.

Please use the links below to find more information about the practice and data protection.

• Transparency
• CCTV
• Telephone Recording
• Case Finding
• Suffolk Sharing

Practice Processor List

Ivry Street Medical Practice uses the following organisations to process data on our behalf. They are contractually bound to manage your information securely.

Clinical System Provider

• SystmOne (TPP)

Integrated Care Board (ICB)

• Suffolk and North East Essex Integrated Care Board (ICB)

Confidential Waste Services

• Shred-It

Couriers

• North East Essex, Suffolk Pathology Services

DBS Check Providers

• UCheck

Digital Scanning / Redaction

• Scan House

Health Hardware

• Spacelabs

Health Software

• Accurx
• Accurx Record Viewer
• C the Signs
• Eclipse Solutions (Safety Reports)
• e-referrals
• Health Intelligence
• Pinnacle (COVID Vaccinations)

IT Service Providers

• Arden & Gem CSU
• NELCSU

Payroll / Finance

• IRIS accounting software
• Xero

Training Providers

• Blue Stream
• e-LH
• W S Learning

Video Consultation-Software

• E-Consult / NHS App
• Microsoft Teams
• Zoom

Translation Services

• DA Languages

Website Providers

• E-Consult / NHS App
• Mysurgery Website

Offsite Storage Providers

• Scan House

Other Providers

• Open Exeter

Practice Processing Activities Log

Last reviewed: 16th September 2022

Referrals, test results, discharge notices

Exchanging health information across the health and social care network to facilitate care for the individual.

Categories of individuals

• Patients

Categories of personal data

• Contact Details
• NHS No.
• DOB
• Referral Reason
• Supporting Clinical Information i.e. meds, allergies

GDPR Lawful Basis - Personal Data

• 6 (1) (e) Public Task

GDPR Lawful Basis - Spec Cat Data

• 9 (h) Medicine

DPA 2018 Exemption (Personal)

• Sch 9 (5) (e) Public Task

DPA 2018 Exemption (Sensitive)

• Sch 10 (8) (1) Medical Purposes

Source of Data

• Patient provides, practice generates internally, or other health / care providers provide.

Data includes Sensitive / Special Categories

• Yes

Extended / Out of Hours Services

External consultants access the practice record and provide details of consultation back to practice.

Categories of individuals

• Patients

Categories of personal data

• Contact Details
• NHS No.
• DOB
• Medication Details

GDPR Lawful Basis - Personal Data

• 6 (1) (e) Public Task

GDPR Lawful Basis - Spec Cat Data

• 9 (h) Medicine

DPA 2018 Exemption (Personal)

• Sch 9 (5) (e) Public Task

DPA 2018 Exemption (Sensitive)

• Sch 10 (8) (1) Medical Purposes

Source of Data

• The patient provides, generated internally or other health/care providers provide.

Data includes Sensitive / Special Categories

• Yes