Confidentiality

Mediwell Clinic is registered under the Data Protection Act and have robust systems in place to protect your confidentiality in line with the Data Protection Act (DPA) 2018 and General Data Protection Regulation (GDPR).

All information about patients is confidential: from the most sensitive diagnosis, to the fact of having visited the surgery or being registered at the Practice. All patients can expect that their personal information will not be disclosed without their permission except in the most exceptional of circumstances, when somebody is at grave risk of serious harm.

All members of the Mediwell Clinic (from reception to doctors) in the course of their duties will have access to your medical records. They all adhere to the highest standards of maintaining confidentiality.

Mediwell staff complete Data protection and information governance training annually. Please be aware that our staff will enter into a written confidentiality agreement in a statement that forms part of their contract of employment to hold them contractually responsible for maintaining Patient, staff and other individual confidentiality at all times. They are therefore not permitted to discuss any of our patient’s medical history, including their registration status, without their written consent to do so.

Once written consent has been received and verified with the patient we can provide you with information as required; this includes communicating with you on behalf of the patient with regards to any complaints, but excludes patients who are unable to act on their own behalf and already have a designated person or carer responsible for their medical care.

Personal Information
All paper and electronic records are stored securely to prevent any unauthorised access or use. Your personal information will continue to be protected by the conditions of the Data Protection Act 2018.

Please keep us informed of any changes to your personal details. Under the Data Protection Act (DPA) 2018 and General Data Protection Regulation (GDPR) patients have a legal right to apply for access to health information held about them.