Accurx Privacy Notice

As part of the Digital First National programme of work, GP Practices are required to provide a tool for patients to access primary care services. 

The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients. 

Using the Accurx platform will require the processing of special category data by Accurx, their sub-processors and by default the GP Practice as a Controller. This will include; exchanging and storing messages in relation to patients and medical staff, performing video consultations (these will not be recorded or stored) between healthcare staff and their patients This will allow you to respond to the Practice in multiple ways such as; free text, questionnaires and submitting images/documents. 

If you have a non-urgent healthcare concern or need to contact the Practice for any medical or admin reason, click on the online via our website or via NHS app or via NHS website. Fill out the online form, which will then be reviewed and processed by our healthcare professionals to decide the right care for you. We will respond to every online request 3 workings days.

Accurx is approved by NHS England to be used by GP practices and the other systems involved in patient care. NHS England has a lengthy assurance process to make sure they meet the highest standards of safety and security. Your data is safe and is shared only with your GP Practice for the purposes of your direct care. Your data is stored and sent securely using industry best practices, and Accurx only collect the data that is necessary to allow your GP Practice to provide you with care. 

The Practice uses the following Accurx features:

• SMS, Friends and Family test, online consultations, AccuMail, Record Views

Accurx’s privacy notice can be found on their website here: Accurx | Privacy Policy

Controller contact details

Data Protection Officer contact details

GP Data Protection Officer South East London Integrated Care Board - See South East London ICS website for details

Purpose of the processing

The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients. 

Lawful basis for processing    

Under UK GDPR and DPA 2018:

• 6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.
• 9(2)(h) ‘…medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems…’

Recipient or categories of recipients of the shared data

Data may be shared with Accurx, and their sub-processors such as cloud services used for Accurx’s own storage, communications, security, engineering, and similar purposes.

Rights to object

You have the right under Article 21 of the UK GDPR to object to your personal information being processed. Please contact the Practice if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.

Right to access and correct

You have the right to access copies of the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.

Retention period

The data will be retained for active use during the processing and thereafter according to NHS Policies and the law.

Right to Complain

You have the right to complain to us about the way your data is handled or processed. To so, please contact the Practice using the  following details:

If you remain unsatisfied with our response, you have a right to complain to the Information Commissioner’s Office.

There are National Offices for Scotland, Northern Ireland and Wales.