Privacy Policy

Use of your personal information

Your information is securely kept by DHC. Our computer records are restricted to those with authorised access and levels of access are based on staff roles.

Information sharing

We only share information outside of DHC with your consent. This often requires us to get your written consent to provide information to third parties (for instance, insurance companies or solicitors) but can also be implied consent (for instance, when we have agreed with you about a referral to another service or for a test). There are a few extreme situations where we may be required to share your information without consent (for example, a serious criminal offence).

Sharing medical records with Surrey GP Practices

We have developed an innovative IT solution that allows shared records between the outpatients department and each of the four Dorking practices and Holmhurst Medical Centre. This means that if a patient is referred to Dorking Hospital for an outpatients appointment then the consultant has access to an up to date extract of the practice record. This is not the full GP record but it does include:

• A history of the relevant medical problem
• The GP’s referral letter
• Related hospital letters
• A summary of key diagnoses, life events and operations
• Current medication
• Recent test results

The shared record also means information on the outpatient appointment is often available in the practice on the following day.
DHC complies with the Data Protection and Access to Medical Records legislation. If you have any questions about the use of your personal information then please contact:

General Data Protection Regulation (GDPR) 2018

The GDPR, agreed upon by the European Parliament and Council in April 2016, will replace the Data Protection Directive 95/46/ec in Spring 2018 as the primary law regulation how organisations protect EU citizens’ personal data. As a result we have updated our Privacy Notice, which can be accessed below: 

If you have a concern about the way we are collecting or using your personal information, you should raise your concern with us in the first instance or directly to the Information Commissioner’s Office: