Privacy Notice

As part of the Digital First National programme of work, GP Practices are required to provide a tool for patients to access primary care services.

The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients.
Using the Accurx platform will require the processing of special category data by Accurx, their sub-processors and by default the GP Practice as a Controller. This will include; exchanging and storing messages in relation to patients and medical staff, performing video consultations (these will not be recorded or stored) between healthcare staff and their patients This will allow you to respond to the Practice in multiple ways such as; free text, questionnaires and submitting images/documents.

If you have a non-urgent healthcare concern or need to contact the Practice for any medical or admin reason, click on the online via our website or via NHS app or via NHS website. Fill out the online form, which will then be reviewed and processed by our healthcare professionals to decide the right care for you. We will respond to online requests within 2 working days for medical queries and 5 working days for admin queries.

Accurx is approved by NHS England to be used by GP practices and the other systems involved in patient care. NHS England has a lengthy assurance process to make sure they meet the highest standards of safety and security. Your data is safe and is shared only with your GP Practice for the purposes of your direct care. Your data is stored and sent securely using industry best practices, and Accurx only collect the data that is necessary to allow your GP Practice to provide you with care.

The Practice uses the following Accurx features:

·         Online consultations

·         Video consultations

·         AccuMail

·         SMS

·         Friends and Family test

·        Record Views

The Accurx privacy notice can be found on their website here: Accurx | Privacy Policy.

1) Controller

contact details



Derry Downs Surgery


2) Data Protection Officer contact details GP Data Protection Officer

[email protected]

3) Purpose of the processing The aim of the Accurx platform is to improve communications between healthcare staff and patients resulting in improved outcomes and productivity. The platform facilitates digital communications between the practice and our patients.
4) Lawful basis for processing Under UK GDPR and DPA 2018 –

6(1)(e) ‘…necessary for the performance of a task carried out in the public interest or in the exercise of official authority…’.

9(2)(h) ‘…medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems…’

5) Recipient or categories of recipients of the shared data Data may be shared with Accurx, and their sub-processors such as cloud services used for Accurx’ own storage, communications, security, engineering, and similar purposes.
6) Rights to object You have the right under Article 21 of the UK GDPR to object to your personal information being processed. Please contact the Practice if you wish to object to the processing of your data. You should be aware that this is a right to raise an objection which is not the same as having an absolute right to have your wishes granted in every circumstance.
7) Right to access and correct You have the right to access copies of the data that is being shared and have any inaccuracies corrected. There is no right to have accurate medical records deleted except when ordered by a court of Law.
8) Retention period The data will be retained for active use during the processing and thereafter according to NHS Policies and the law.
9)  Right to Complain. You have the right to complain to us about the way your data is handled or processed. To so, please contact the Practice using the following details:


Derry Downs Surgery

29 Derry Downs, St Mary Cray, Orpington, Kent, BR5 4DU


If you remain unsatisfied with our response, you have a right to complain to the Information Commissioner’s Office. To do so, you can use this link or call their helpline

Tel: 0303 123 1113 (local rate) or 01625 545 745 (national rate)

There are National Offices for Scotland, Northern Ireland and Wales, (see ICO website).

ACR project for patients with diabetes (and/or other conditions)


The data is being processed for the purpose of delivery of a programme, sponsored by NHS Digital, to monitor urine for indications of chronic kidney disease (CKD) which is recommended to be undertaken annually for patients at risk of chronic kidney disease e.g., patients living with diabetes. The programme enables patients to test their kidney function from home. We will share your contact details with to enable them to contact you and send you a test kit.  This will help identify patients at risk of kidney disease and help us agree any early interventions that can be put in place for the benefit of your care. will only use your data for the purposes of delivering their service to you. If you do not wish to receive a home test kit from we will continue to manage your care within the Practice. are required to hold data we send them in line with retention periods outlined in the Records Management code of Practice for Health and Social Care. Further information about this is available at: