Healthy Prestatyn Iach has a legal duty to explain how we use any personal information we collect about you, as a registered patient at the practice. Staff at this practice maintain records about your health and the treatment you receive in electronic and paper format.


What information do we collect about you?

We will collect information such as personal details, including name, address, next of kin, records of appointments, visits, telephone calls, your health records, treatment and medication, test results, x-rays and any other relevant information to enable us to deliver effective medical care.


How we will use your information

Your data is collected for the purpose of providing direct patient care; however, we can disclose this information if it is required law, if you give consent or if it justified in the public interest. The practice may be requested to support research; however, we will always gain your consent before sharing your information with medical research databases when the law allows.

NHS Wales also uses relevant information about your health to help improve NHS Wales’ services and public health. Information will only be used or passed on to others involved in your care if they need it. Whenever your information is used for your care it will be handled in the strictest confidence. NHS Wales will not normally disclose your personal information without your concern unless it is in your best interests or required by law.


Maintaining confidentiality and accessing your records

We are committed to maintaining confidentiality and protecting the information we hold about you. We adhere to the General Data Protection Regulation (GDPR), the Confidentiality Code of Practice for Health and Social Care in Wales, as well as guidance issued by the Information Commissioner’s Office (ICO). You have the right to access information we hold about you, if you would like to access information you will need to complete a Subject Access Request (SAR). Please ask at reception for a SAR form.

Furthermore should you identify any inaccuracies, you have the right to have the inaccurate data corrected.


Primary Care Clusters: Access to your Medical Information

Groups of GP Practices have been set up across Wales to ensure patients’ needs are met in the best possible way. These are known as ‘Primary Care Clusters’.

GPs will work alongside Nurses, Pharmacists and other health professionals, such as Physiotherapists, sharing their workload.

This will promote greater continuity of care for you as a patient, and ensure better access to services.

It will also mean that, in future, you may be able to receive services that would have previously been delivered in a hospital.


How will my information be kept secure and confidential?

Your information is held on a secure computer system and access to it is strictly controlled, monitored and audited. The GP Practices within the Cluster have signed an agreement, to confirm that their staff will follow strict controls when accessing your information.

All staff receive regular training to ensure your information is kept securely and confidentially in line with data protection legislation.


Who will be able to access my medical information?

Within each Cluster, healthcare professionals involved in your care will have access to your medical record.

Pharmacists may access your records, when for example, undertaking prescription reviews or answering any queries regarding your medication.

Receptionists also have access to carry out tasks such as; processing prescriptions, delivering test results and directing you to an appropriate health professional.

All staff accessing your record will be employed by a practice within this GP Cluster or by the Local Health Board.


When is my information shared?

We will only share your information with staff working in the Cluster (this includes Health Board staff working in the community) who are treating you or supporting your care.

We will not disclose your information to anyone else without your permission unless, there is an exceptional circumstance (i.e. life or death situation) or where the law requires it.


How do I access my medical information?

You have a right under data protection legislation to access or view information the practice holds about you, and to have it amended should it be inaccurate. If you would like to make a request, please contact your practice.


Benefits of sharing your information within a Cluster

  • You will have quicker access to a health professional
  • You won’t need to repeat your medical history to the staff caring for you
  • You will continue to be involved in any decisions about your care
  • You will have a wider range of locations available for consultations
  • You will have a wider range of services available 

Your information, Your rights – what you need to know

If you have concerns about the way your information is used you should discuss these with the healthcare professional responsible for your care.

If you would like to know more about how your personal information is used please visit the NHS Direct Wales website at


Freedom of Information Act (2000)

The above act gives individuals the right to access all types of recorded information. Please ask for more information.