Privacy Policy
Privacy Statement for Coventry & Warwickshire Integrated Primary Care (IPC)
Who We Are
Coventry and Warwickshire Integrated Primary Care (IPC) is a not-for-profit organisation providing at scale primary care services across the Coventry and Warwickshire Integrated Care System.
Made up of the four GP federations/ at scale providers, we provide services for 1 million local patients, supporting national and local healthcare priorities in partnership with NHS, public health, and wider system partners.
Whilst some overall contracts are held between Coventry and Warwickshire Integrated Primary Care (IPC) and the commissioner, our partner organisations as listed below are responsible for the delivery and provision of those services which are sub-contracted to them.
- South Warwickshire GP Federation (SWGP Fed)
- Coventry and Rugby GP Alliance; (CRGPA)
- Rugby Health; (RH)
- Primary Care Warwickshire. (PCW)
- Training Hub (TH)
SWGP deliver:
- Primary Care Dermatology
- Primary Care Gynaecology
- Ophthalmology Coordination service
- Digital Champions
- GP Clinical Leadership programme
CRGPA Deliver:
- Respiratory @ Home
- Primary Care Surge
Data Protection impact assessments for all services delivered by IPC utilised on this website are available on request.
Coventry and Warwickshire Integrated Primary Care Limited is a Data Controller
IPC is the parent organisation of Coventry and Warwickshire Training Hub and is the Data Controller for all data processed under the services delivered by Coventry and Warwickshire Training Hub
IPC is registered with the ICO as a Data Controller under the Data Protection Act 2018. The registration number is ZA792332.
Registered offices:
Coventry and Warwickshire Integrated Primary Care
C/O Ballards LLP
Oakmoore Court
Kingswood Road
Hampton Lovett
Droitwich
Worcs
WR9 0QH
South Warwickshire GP Federation is a data controller for the service delivery as stated in section ‘who are we’
The organisation is registered with the ICO as a Data Controller under the Data Protection Act 2018. The registration number is ZA104695
Coventry and Rugby GP Alliance is a data controller for the service delivery as stated in section ‘who are we’
The organisation is registered with the ICO as a Data Controller under the Data Protection Act 2018. The registration number is ZA129377
https://www.coventryrugbygpalliance.nhs.uk/privacy-policy/.
Why We Collect Your Information
As part of delivering safe and effective healthcare, we collect and process personal data to:
- Provide you with appropriate care and treatment
- Support clinical decision-making
- Coordinate services across providers
- Ensure compliance with legal and regulatory obligations
- Support planning, audit, and service improvement
- Provision of a training service to General Practice Workforce
What Information We Collect
We may collect the following types of information, this can include electronic, paper or a mixture of both:
- Personal identifiers (e.g., name, NHS number, date of birth)
- Contact details
- Health and care records
- Information about care interactions with other NHS and care providers
- Relevant demographic or social data
Some of this data may be used for statistical purposes and we will ensue that individuals cannot be identified. For situations where we may contribute to research projects, we will always gain your explicit consent before releasing any relevant information.
Lawful Basis for Processing
Our legal bases for processing your personal data for the provision of care under the UK GDPR include:
- Article 6(1)(e): Public task – processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority
- Article 9(2)(h): Provision of health or social care – processing is necessary for the provision of health or social care or treatment
Our legal bases for processing your personal data for training purposes:
- 6(1)(a) consent to processing for specific purposes
- 9(2)(a) explicit consent and 9(2)(h) occupational needs of the trainee
We may also process data where required to comply with legal obligations (e.g., safeguarding) or to support public health.
- 9(2)(j) necessary processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purpose in accordance with Article 89(1)
How We Keep Your Data Safe
We follow strict NHS and legal standards for data protection, including:
- UK GDPR and Data Protection Act 2018 compliance
- Staff training and access controls
- Secure NHS-approved IT systems and networks
- Human Rights Act 1998
- Common Law Duty of Confidentiality
- Health and Social Care Act 2012 (if appropriate)
- Codes of Confidentiality, Information Security and Records Management
Where data is shared with trusted partners, we ensure appropriate data processing agreements are in place.
Sharing Your Information
We may share information with other health and care providers, such as:
- GP practices
- CRGPA
- SWGP Fed
- NHS Trusts and hospitals
- Community and mental health services
- Social care providers
- NHS England (for statutory reporting)
Data is only shared when necessary and in line with legal requirements, including confidentiality and the Caldicott Principles.
Your Rights
Under data protection law, you have the right to:
- Be informed about how your data is used
- Access your health data
- Request correction of inaccurate data
- Object to or restrict processing in certain circumstances
- Request deletion of your data where applicable
To exercise these rights or raise a concern, please contact us using the contact details below.
Data Retention
We retain health records in line with the NHS Records Management Code of Practice and statutory obligations. Data is held securely and only for as long as necessary.
Cookies
This website makes use of cookies to optimise user experience. By using our website, you consent to all cookies in accordance with our cookie policy.
If you’d like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages on your web browser. Please note, however, that if you delete cookies or refuse to accept them, you might not be able to use all the features we offer, you may not be able to store your preferences, and some of our pages might not display properly.
Contact Points
For any queries or to request access to your data for:
- Primary Care Dermatology
- Primary Care Gynaecology
- Ophthalmology Coordination service
- Digital Champions
- GP Clinical Leadership programme
Please contact: quality@southwarwickshiregps.nhs.uk
For any queries or to request access to your data for:
- Respiratory @ Home
- Primary Care Surge
Please contact: crgpa.coventryrugbygpalliance@nhs.net
For any queries or to request access to your data for:
- Training Hub
- Coventry and Warwickshire Integrated Primary Care
Please contact: info@cw-ipc.co.uk
Data Protection Officer
The Data Protection Officer (DPO) service is provided by Arden and GEM CSU
T: 0121 611 0730
E: agem.dpo@nhs.net
Further Information
For more on your data rights, visit:
ICO website – www.ico.org.uk [ico.org.uk]
NHS Privacy Notices – www.nhs.uk/your-nhs-data-matters [nhs.uk]
