Skip to main content

Privacy Information

How the Practice Handles Your Information


Purpose of this Privacy Information

This privacy notice explains what to expect when you, and sometimes others, provide your personal information to St David's Court Surgery. It explains:

  • what personal information we collect;
  • why we collect it;
  • how it is used;
  • who it may be shared with; and
  • how we keep it secure and confidential.

This notice also explains your rights under UK data protection legislation, our legal basis for processing your information, and how you can access your personal information or contact us if you have any questions.

St David's Court Surgery is the Data Controller for the personal information we process, unless otherwise stated.

To support the delivery of NHS services, the Practice also uses a number of trusted third-party systems and digital service providers. Where these organisations process personal information on our behalf, additional privacy notices are provided below.

There are many ways you can contact the Practice, including by telephone, email or post. Further details can be found on our Practice Details webpage.

Data Protection Complaints

If you have any questions or concerns about how we process your personal information, please contact the Practice or our Data Protection Officer (DPO) in the first instance.

For concerns or complaints about your care or the services we provide, please see our Listening to People page. This section relates specifically to concerns about how your personal information is processed. 

If you believe that St David's Court Surgery has not processed your personal information in accordance with UK data protection legislation, you have the right to make a data protection complaint.

This may include concerns relating to:

  • confidentiality;
  • information sharing;
  • access to medical records;
  • Subject Access Requests;
  • consent;
  • the accuracy of information we hold; or
  • any other rights relating to your personal information.

Data protection complaints may be made verbally or in writing and will be investigated in accordance with the Practice's Data Protection Complaints Procedure.

Practice Information Governance Lead

Practice Manager

Contact Details

St David's Court Surgery
68A Cowbridge Road East
Canton
Cardiff
CF11 9DU

Telephone: 029 2037 9510

Our Reception Team will be happy to direct your enquiry or provide further information.

Information Commissioner's Office

If you remain dissatisfied after contacting the Practice or our Data Protection Officer, you have the right to complain to the Information Commissioner's Office (ICO).

Website: https://ico.org.uk

Helpline: 0303 123 1113

Data Protection Officer

Under UK data protection legislation, the Practice is required to appoint a Data Protection Officer (DPO). The DPO provides independent advice and support to help ensure the Practice complies with its data protection responsibilities.

Our Data Protection Officer is:

Digital Health and Care Wales
Information Governance – Data Protection Officer Support Service
4th Floor, Tŷ Glan-yr-Afon
21 Cowbridge Road East
Cardiff
CF11 9AD

Email: DHCWGMPDPO@wales.nhs.uk 

Third-Party Service Privacy Notices

The Practice uses a number of approved third-party systems to support the delivery of NHS services.  These providers support the delivery of NHS services and may process personal information on our behalf or as part of the services they provide. The privacy notices below explain how your information is handled when you use these services.