MedLink – Long Term Condition Recall and Monitoring - Privacy Policy

Heathcot Medical Practice uses MedLink to support the management of long-term condition reviews, medication monitoring and routine recall programmes.

MedLink works on behalf of the Practice to help us:

• Invite eligible patients for reviews and health checks.
• Coordinate long-term condition and medication monitoring.
• Send communications via SMS, email, NHS App notifications or automated telephone messages where appropriate.
• Record and manage responses to support your ongoing care.

Your personal information is processed under UK GDPR and the Data Protection Act 2018.

The Practice remains the Data Controller for your information. MedLink acts as a Data Processor and only processes your personal information on our behalf and under our written instructions. They are contractually required to keep your information secure and confidential and cannot use it for any purpose other than providing services to the Practice.

The lawful basis for processing your information is:

• Article 6(1)(e) UK GDPR – Processing necessary for the performance of a task carried out in the public interest.
• Article 9(2)(h) UK GDPR – Processing necessary for the provision and management of health or social care.

Information processed may include:

• Your name and NHS number.
• Contact details.
• Relevant medical conditions.
• Medication and monitoring requirements.
• Appointment and review information.

Your information will only be shared where necessary for your direct care or where required by law. Appropriate technical and organisational security measures are in place to protect your data.

For more information about how MedLink processes information on behalf of healthcare providers, please see their privacy information:
MedLink Privacy Policy

If you have any questions about how your personal information is used, or wish to exercise your data protection rights, please contact the Practice's Data Protection Officer via the Practice.