Privacy notice

How we use your information, and what you can ask us to do.

Riverlight Medical Practice is the data controller for the patient information it holds. We process it to provide your care, to meet NHS contractual duties and to satisfy legal obligations, under the UK GDPR and the Data Protection Act 2018. Our lawful bases are public task, provision of health care, and legal obligation.

Your record

Your GP record is held on the practice clinical system. It is shared, where the law allows and with your consent where needed, with people treating you: hospitals, out-of-hours services, community nursing, pharmacies and the ambulance service.

Summary Care Record

A Summary Care Record containing your medicines, allergies and reactions is available to treating clinicians nationally. You may add other information, or opt out — ask reception.

Research and planning

Anonymised data feeds NHS planning. You may opt out of your identifiable data being used for research and planning through the national data opt-out.

Medical evidence

When we complete an SR1, fit note or report, the relevant part of your record is summarised for that purpose and sent to whoever asked. See SR1 medical evidence.

Retention

Adult records are kept for 10 years after the last contact; children's until age 25, or 10 years after last contact if longer. Maternity records are kept for 25 years.

Your rights

  • Ask for a copy of your record
  • Ask for errors to be corrected
  • Object to some processing
  • Ask for a restriction on sharing
  • Complain to the Information Commissioner's Office, on 0303 123 1113

Ask reception, or write to Ruth Kenward, practice manager. We answer subject access requests within one month. Access is free.

Data Protection Officer

The practice's DPO is provided through the London primary care DPO service. Contact them through reception. A full notice, including the DPO's direct details and our retention schedule, is available at reception and in large print on request.

Page last reviewed 1 October 2026. Next review 2026-14. If you spot something out of date, tell reception.