Privacy-first healthcare workflow

Privacy Notice Starter

This page must be reviewed and approved by the live GP practice, pharmacy, or healthcare organisation before go-live.

Operating Model (Model A)

PharmaPortal software operator: McauleeMaddison.

Data controller and care provider: TBC Controller Organisation.

For patient privacy rights, clinical records, and care decisions, the controller organisation is the primary contact.

Controller privacy contact: privacy@yourcompany.co.uk

Controller DPO contact: privacy@yourcompany.co.uk

Processor support contact: macwebstudio26@gmail.com

Data protection contact: privacy@yourcompany.co.uk

Data Collected

Patient account details, contact details, repeat prescription request data, request status history, staff notes, and audit logs.

Purpose

To manage repeat prescription requests and secure communications between patients and authorised healthcare staff.

Important

This is a starter notice and not legal advice. Production use requires a signed DPA, UK GDPR review, and healthcare governance approval.