Practice Policies & Patient Information
Care Quality Commission
As an NHS GP practice we are regulated by the Care Quality Commission (CQC). Harcourt Medical Centre is registered and monitored by CQC and is currently rated as ‘Good’
We are registered to provide:
- Diagnostic and screening procedures
- Maternity and midwifery services
- Treatment of disease, disorder or injury
- Family planning
- Surgical procedures
Dr Benjamin Kay is the registered manager and is responsible for standards at the medical centre.
The CQC regulates health and care services to ensure that safe care is provided. The law requires that we must report certain serious events to the CQC, for example, when patient safety has been put at risk. Further information about the CQC can be found by clicking here:
Doctors’ Lists
As a listed practice, each patient will be assigned to a Doctor’s ‘list’. Lists are either covered by one GP or several GPs sharing due to part time working.
We aim to book each appointment with your registered GP wherever we can to ensure continuity of care.
GP Net Earnings 2022-23
All GP practices are required to declare the mean earnings (e.g. average pay) for GPs working to deliver NHS services to patients at each practice.
The average pay for GPs working in Harcourt Medical Practice in the last financial year was £82,497 before tax and National Insurance. This is for 2 full time GPs, 9 part time GPs who worked in the practice for more than six months.
How long do we keep your personal information?
We follow the NHS X Records Management Code of Practice 2021 which states that electronic patient records should be retained for 10 years from the date of death. At that point, all personal data we hold on you will be securely deleted.
We keep recordings of our calls for 3 months.
How NHS Digital will use and share your data
NHS Digital will analyse the data they collect and securely and lawfully share data with other appropriate organisations, including health and care organisations, bodies engaged in disease surveillance and research organisations for coronavirus response purposes only. These purposes include protecting public health, planning and providing health, social care and public services, identifying coronavirus trends and risks to public health, monitoring and managing the outbreak and carrying out of vital coronavirus research and clinical trials. The British Medical Association, the Royal College of General Practitioners and the National Data Guardian are all supportive of this initiative.
NHS Digital has various legal powers to share data for purposes relating to the coronavirus response. It is also required to share data in certain circumstances set out in the COVID-19 Direction and to share confidential patient information to support the response under a legal notice issued to it by the Secretary of State under the Health Service (Control of Patient Information) Regulations 2002 (COPI Regulations).
Learn more by clicking here
Legal notices under the COPI Regulations have also been issued to other health and social care organisations requiring those organisations to process and share confidential patient information to respond to the coronavirus outbreak. Any information used or shared during the outbreak under these legal notices or the COPI Regulations will be limited to the period of the outbreak unless there is another legal basis for organisations to continue to use the information.
Learn more by clicking here
Data which is shared by NHS Digital will be subject to robust rules relating to privacy, security and confidentiality and only the minimum amount of data necessary to achieve the coronavirus purpose will be shared. Organisations using your data will also need to have a clear legal basis to do so and will enter into a data sharing agreement with NHS Digital. Information about the data that NHS Digital shares, including who with and for what purpose will be published in the NHS Digital data release register.
Learn more by clicking here
For more information about how NHS Digital will use your data please see the NHS Digital Transparency Notice for GP Data for Pandemic Planning and Research (COVID-19) by clicking here.
How to make a complaint
If you have a complaint or concern about the service you have received from the doctors or any of the staff working at Harcourt Medical Centre, please let us know. This includes Primary Care Network staff working with us. We operate a complaints procedure as part of the NHS system for dealing with complaints. Our complaints system meets national criteria.
How to complain
We hope that most problems can be sorted out easily and quickly when they arise and with the person concerned. This may be during a consultation or an arranged meeting.
If your problem cannot be sorted out this way and you wish to make a complaint, please write to us if possible, being as specific as possible to enable us to respond fully without misunderstanding.
What we will do
We will acknowledge your complaint within three working days. We will aim to have investigated your complaint within six weeks of the date you raised it with us. We will then offer you an explanation or a meeting with the people involved, if you would like this. When we investigate your complaint, we will aim to:
- Find out what happened and what went wrong.
- Make it possible for you to discuss what happened with those concerned, if you would like this.
- Make sure you receive an apology, where this is appropriate.
- Identify what we can do to make sure the problem does not happen again.
Complaining on behalf of someone else
We take medical confidentiality seriously. If you are complaining on behalf of someone else, we must know that you have their permission to do so. A note signed by the person concerned will be needed unless they are incapable (because of illness) of providing this.
Complaining to NHS England
We hope that you will use our Practice Complaints Procedure if you are unhappy. We believe this will give us the best chance of putting right whatever has gone wrong and an opportunity to improve our GP Practice.
However, if you feel you cannot raise the complaint with us directly, please contact NHS England. You can find more information on how to make a complaint at https://www.england.nhs.uk/contact-us/complaint/complaining-to-nhse/.
Unhappy with the outcome of your complaint?
If you are not happy with the way your complaint has been dealt with and NHS England and would like to take the matter further, you can contact the Parliamentary and Health Service Ombudsman (PHSO). The PHSO makes final decisions on unresolved complaints about the NHS in England. It is an independent service which is free for everyone to use.
To take your complaint to the Ombudsman, visit the Parliamentary and Health Service Ombudsman website or call 0345 015 4033
Need help making a complaint?
If you want help making a complaint, Healthwatch Wiltshire can help you find independent NHS complaints advocacy services in your area.
Legal basis
We have been commissioned by the Bath and North East Somerset, Swindon and Wiltshire Clinical Commissioning Group to provide a GP surgery service and it is necessary for the performance of this task in the public interest for us to process your personal data.
We will use your special categories of personal data, such as that relating to your race, ethnic origin, and health for the purposes of providing you with health or social care or the management of health or social care systems and services. Such processing will only be carried out by a health or social work professional or by another person who owes a duty of confidentiality under legislation or a rule of law.
In some circumstances, we may process your personal information on the basis that:
- it is necessary to protect your vital interests;
- we are required to do so in order to comply with legal obligations to which we are subject;
- we are required to do so for the establishment, exercise or defence of a legal claim;
or
- you have given us your explicit consent to do so.
Data Protection Officer
Our Data Protection Officer (DPO) function is provided by the Medvivo Data Protection Officer service.
How to contact us
If you have any questions about our privacy notice, the personal information we hold about you, or our use of your personal information then please contact our Data Protection Team at:
Data Protection Team
Harcourt Medical Centre. Crane Bridge Road, Salisbury, Wiltshire. SP2 7TD
Or
All data protection queries will be initially dealt with by the practice data protection team and escalated to the Medvivo Data Protection Officer service if required.
NHS National Data Opt-Out
Whenever you use a health or care service, such as attending Accident & Emergency or using Community Care Services, important information about you is collected in a patient record for that service. Collecting this confidential patient information helps to ensure you get the best possible care and treatment.
The confidential patient information collected about you when you use these services can also be used and provided to other organisations for purposes beyond your individual care where allowed by law.
You have a choice about whether you want your confidential patient information to be used in this way. If you are happy with this use of information, you do not need to do anything. If you choose to opt out your confidential patient information will still be used to support your individual care.
We do not share your confidential patient information for purposes beyond your individual care without your permission. When sharing data for planning and reporting purposes, we use anonymised data so that you cannot be identified in which case your confidential patient information isn’t required.
Information being used or shared for purposes beyond individual care does not include your confidential patient information being shared with insurance companies or used for marketing purposes and information would only be used in this way with your specific agreement.
Health and care organisations that process confidential patient information have to put systems and processes in place so they can be compliant with the national data opt-out. They must respect and apply your opt-out preference if they want to use or share your confidential patient information for purposes beyond your individual care.
Harcourt Medical Centre are currently compliant with the national data-out policy as we do not share your confidential patient information for purposes beyond your individual care without your permission.
To find out more or to register your choice to opt out, please visit by clicking here
You can change your choice at any time.
Other NHS Organisations
Sometimes the practice will share information with other NHS organisations that do not directly care for you, such as the Clinical Commissioning Group. However, this information will be anonymous and does not include anything written as notes by the GP and cannot be linked to you.
We will not share your information with organisations other than health and social care providers without your consent unless the law allows or requires us to.
Patient Participation Group
A patient participation group is generally made up of a group of volunteer patients, the practice manager and one or more of the GPs from the practice. The group meets on a regular basis to discuss the services on offer, and how improvements can be made for the benefit of patients and the practice.
The aims of the group are to:
- Provide input on the issues affecting the practice
- Review suggestions and feedback from patients
- Get updates on developments and changes
We have an active and engaged patient participation group with meetings approximately every 6 to 8 weeks.
If you would be interested in volunteering and are a registered patient with us, please email [email protected] for an application form.
Patients Privacy Notice
Harcourt Medical Centre is a well-established GP Practice. Our General Practitioners and allied healthcare professionals provide primary medical care services to our practice population and are supported by our administrative and managerial team in providing care for patients.
This privacy notice explains how we as a data controller use any personal information, we collect about you as a patient of health care services provided by Harcourt Medical Centre
Why do we collect your personal information?
Health care professionals who provide you with care are required by law to maintain records about your health and any treatment or care you have received within any NHS organisation. These records help to provide you with the best possible healthcare and help us to protect your safety.
We collect and hold data for the purpose of providing healthcare services to our patients and running our organisation which includes monitoring the quality of care that we provide. In carrying out this role we will collect information about you which helps us respond to your queries or secure specialist services. We will keep your information in written form and/or in digital form. The records will include both personal and special categories of data about your health and wellbeing.
What types of personal information do we collect about you?
We may collect the following types of personal information:
- Your name, address, email address, telephone number and other contact information
- Gender, NHS Number and date of birth and sexual orientation
- Details of family members and next of kin details
- Health (Medical) information, including information relating to your sex life
- Details of any contact the surgery has had with you, such as appointments, clinic visits, emergency appointments and telephone calls.
- Results of investigations such as laboratory tests or x-rays
- Biometric data
- Genetic information
How will we use the personal information we collect about you?
We may use your personal information in the following ways:
- To help us assess your needs and identify and provide you with the health and social care that you require
- To determine the best location to provide the care you require
- To comply with our legal and regulatory obligations
- To help us monitor and manage our services
- To support medical research
Text (SMS) messages
If you have provided your mobile telephone number, we may use this to send automatic appointment reminders, requests to complete surveys or to make you aware of services provided by the surgery that we feel will be to your benefit.
If you do not wish to receive these text messages, please let the reception team know.
Call recording
Recordings of calls made and received by Harcourt Medical Centre may be used to support the learning and development of our staff and to improve the service we provide to our patients.
They may also be used when reviewing incidents, compliments or complaints.
Call recordings will be managed in the same way as all other personal information processed by us and in line with current data protection legislation.
Data processors
We may use the services of a data processor to assist us with some of our data processing, but this is done under a contract with direct instruction from us that controls how they will handle patient information and ensures they treat any information in line with the General Data Protection Regulation, confidentiality, privacy law, and any other laws that apply.
How will we share your personal information?
We may share your personal information with other health and social care professionals and members of their care teams to support your ongoing health and or social care and achieve the best possible outcome for you. This may include:
· Primary Care Network
Harcourt Medical Centre is a member of the Sarum Cathedral Primary Care Network (PCN) so you may be contacted by or treated by one of the other practices within the PCN. In order to support and provide healthcare services to you, they will require access to your patient record.
· Patient Referrals
With your agreement, we may refer you to other services and healthcare providers for services not provided by Harcourt Medical Centre.
· Other Providers of Healthcare
We will share your information with other providers of healthcare services to enable them to support us in providing you with direct healthcare. This may include NHS organisations or private companies providing healthcare services for the NHS.
· Care Homes or Social Care Services
Sometimes the clinicians caring for you may need to share some of your information with others who are also supporting you outside of the practice.
· Local Authority
The local authority (council) provides health or social care services or assists us in providing direct healthcare services to you. We will share your personal information with them to enable this to take place.
· Safeguarding
We will share your personal information with the safeguarding teams of other health and social care providers where there is a need to assess and evaluate any safeguarding concerns. Your personal information will only be shared for this reason when it is required for the safety of the individuals concerned.
· Summary Care Record (SCR)
Your Summary Care Record is an electronic record of important patient information created from the GP medical records. It contains information about medications, allergies and any bad reactions to medications in the past. It can be seen by staff in other areas of the health and care system involved in your direct care.
· Integrated Care Records (ICR)
An Integrated Care Record allows other health and care providers who are directly involved with your care to access appropriate, timely and relevant information about you to enable them to support your heath and care. Further details about the ICR can be found by clicking here:
· GP Connect
GP Connect is a system that allows other health and care providers access to your GP medical records to enable them to support your heath and care when you are seen outside your normal GP surgery.
· NHS Digital
In order to comply with its legal obligations this practice may send data to NHS Digital when directed by the Secretary of State for Health under the Health and Social Care Act 2012.
This practice contributes to national clinical audits and will send the data, which are required by NHS Digital when the law allows. This may include demographic data, such as date of birth and information about your health, which is recorded in coded form. For example, the clinical code for diabetes or high blood pressure.
· National Services
There are some national services like the national Cancer Screening Programme that collect and keep information from across the NHS. This is how the NHS knows when to contact you about services like cancer screening.
· Risk Stratification
Risk Stratification, also known as ‘Health Risk Screening’, is a process that helps your GP determine whether you are at risk of any unplanned admission or sudden deterioration in health. By using information such as age, gender, diagnosis, and consideration of existing long-term conditions, medication history, patterns of attendance at hospital, admissions and periods of access to community care, your GP supported by the local Clinical Commissioning Group will be able to judge if you are likely to need more support and care from time to time, or if the right services are in place to support the local population’s needs.
As part of the automated Risk Stratification process your pseudonymised personal data (anything that can identify an individual is replaced with code) will be shared with the Bath, Northeast Somerset, Swindon and Wiltshire Clinical Commissioning Group.
You have the right to object to your information being used in this way. However, you should be aware that your objection may have a negative impact on the timely and proactive provision of your direct care. Further details about Risk Stratification can be found by clicking here:
Public Health England
The law requires us to share data for public health reasons, for example to prevent the spread of infectious diseases or other diseases which threaten the health of the population. We will report the relevant information to local health protection team or Public Health England. Further information about Public Health England can be found here
Your rights over your personal data
To read more about the health and care information NHS Digital collects, its legal basis for collecting this information and what choices and rights you have in relation to the processing by NHS Digital of your personal data, see below:
Click here to visit the NHS Digital GPES Data for Pandemic Planning and Research (COVID-19) Transparency Notice
Click here to visit the NHS Digital Coronavirus (COVID-19) Response Transparency Notice
Click here to visit the NHS Digital General Transparency Notice
Click here to visit how NHS Digital looks after your health and care information