Website Privacy Notice

Scope

This privacy notice explains how Larwood Health Partnership collects, uses, stores and protects personal information when you visit our website.

It covers information collected through our website hosting provider, server logs, website statistics and Google Analytics.

This notice applies to visitors to our website. Information about how we use confidential patient information and medical records is available in the Policies and Procedures section of our website.

Our contact details

Organisation: Larwood Health Partnership

Address: 56 Larwood Avenue, Worksop, Nottinghamshire, S81 0HH

Telephone: 01909 500 233

Email: nnicb-bassetlaw.larwoodsurgery@nhs.net

Larwood Health Partnership is responsible for determining how and why personal information collected through our website is processed.

What information do we collect?

When you visit our website, certain technical information may be collected automatically by our hosting provider. Additional information may be collected through Google Analytics if you consent to analytics cookies.

The information we may collect includes:

• IP addresses: Internet Protocol (IP) addresses recorded by our website hosting provider when visitors access our website.
• Website usage: Pages visited, number of visits, time spent on pages and interactions with our website.
• Approximate geographical location: General location information, such as country, region or city.
• Browser and device information: Browser type, operating system, device type and screen resolution.
• Traffic sources: Information about how visitors find our website, including search engines, referring websites and direct visits.
• Session information: Information used to understand website visits and distinguish between users and sessions.
• Technical information: Server requests, access times, response codes and error logs.

The information collected depends on the technologies used and your cookie preferences.

We do not intentionally send patient medical records, NHS numbers or other confidential patient information to Google Analytics.

Why do we collect this information?

We collect website information to support the safe, reliable and effective operation of our website.

This includes:

• Maintaining website security and availability.
• Identifying and resolving technical problems.
• Monitoring website traffic and server performance.
• Detecting potentially malicious or unauthorised activity.
• Understanding which pages and services are most frequently accessed.
• Improving website navigation, accessibility and usability.
• Identifying opportunities to improve our online information and services.

We use this information to help ensure that patients and visitors can access accurate, accessible and reliable information about our services.

How do we collect information?

Website hosting and server statistics

Our website is hosted by Krystal Hosting, which provides the infrastructure necessary to operate our website.

When you visit our website, Krystal’s hosting infrastructure automatically processes technical information associated with your request.

This may include your IP address, the date and time of your visit, pages requested, browser information and server response codes.

We also use website statistics available through our hosting control panel (cPanel), including server-based traffic reporting tools, to monitor website activity and performance.

This information helps us maintain the security, availability and technical operation of our website.

Lawful basis: Public task – Article 6(1)(e) of UK GDPR.

We process this information where necessary to support the performance of our public healthcare functions, including maintaining a secure and accessible website through which patients can obtain information about NHS services.

This processing takes place independently of Google Analytics and does not rely on your consent to analytics cookies.

Google Analytics

We use Google Analytics, a web analytics service provided by Google, to help us understand how visitors use our website.

Google Analytics may collect information about pages visited, session duration, approximate geographical location, device information and traffic sources.

Google Analytics 4 does not log or store individual IP addresses, although IP addresses may be processed temporarily to determine approximate geographical information.

We use the information collected to understand website usage trends and identify opportunities to improve our online services.

Lawful basis: Consent – Article 6(1)(a) of UK GDPR.

Where consent is required, Google Analytics tracking will only be activated after you have agreed to the use of analytics cookies.

For further information about how Google processes information, please visit How Google uses information from websites and apps.

Cookies and your choices

Cookies are small text files stored on your device when you visit a website.

Some cookies are necessary for the website to function correctly, while others help us understand how visitors use our website.

We use Google Analytics cookies to collect information about website usage.

You can choose whether to allow analytics cookies.

You can accept or reject non-essential cookies through our website’s cookie consent controls.

You can also change your preferences or withdraw your consent at any time using the website’s cookie settings.

Refusing analytics cookies will not prevent you from accessing our website or using its services.

You can also prevent Google Analytics from collecting information about your visits by installing the Google Analytics Opt-out Browser Add-on.

Please note that rejecting analytics cookies does not prevent our hosting provider from processing essential technical information, including IP addresses, where necessary for website operation, security and maintenance.

Our lawful bases for processing information

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following lawful bases:

Public task – Article 6(1)(e)

We process technical information, including IP addresses and server logs, where necessary to support the operation, security and availability of our website as part of our public healthcare functions.

This includes essential hosting activities, technical troubleshooting and security monitoring.

Consent – Article 6(1)(a)

We rely on your consent to process personal information through optional Google Analytics tracking.

You can withdraw your consent at any time through our website’s cookie settings.

Withdrawing consent will not affect the lawfulness of processing carried out before your consent was withdrawn.

Who do we share information with?

We use third-party service providers to support the operation and improvement of our website.

These include:

Krystal Hosting

Krystal provides our website hosting infrastructure, server logging facilities and website traffic statistics.

As part of providing these services, Krystal may process technical information, including IP addresses and server access logs, on our behalf.

Google Analytics

Google provides website analytics services that help us understand how visitors use our website.

Where you have provided consent, Google may process website usage information on our behalf using its infrastructure and authorised service providers.

We do not sell visitors’ personal information to third parties.

For further information about Google’s privacy practices, please see the Google Privacy Policy.

Where is your information stored?

Website hosting information

Information collected through our website hosting infrastructure, including server logs and traffic statistics, is processed using systems provided by Krystal Hosting.

The location of storage and processing depends on the hosting infrastructure and services used.

Google Analytics information

Information collected through Google Analytics is processed and stored using Google’s infrastructure.

Although Google uses regional data collection facilities, information may also be processed or stored outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards are required under UK data protection legislation.

We take reasonable steps to ensure that personal information is processed securely and protected against unauthorised access, loss or misuse.

How long do we keep your information?

We retain personal information only for as long as necessary for the purposes for which it was collected.

Website hosting and server logs

Technical information collected by our hosting provider, including IP addresses and server access logs, is retained in accordance with the applicable hosting and server log retention settings.

Google Analytics

Information collected through Google Analytics is retained in accordance with the data retention settings configured for our Google Analytics account.

We periodically review the information we collect and retain to ensure that it remains necessary and proportionate.

Aggregated statistical information that no longer identifies individual visitors may be retained for longer.

Your data protection rights

Under UK data protection legislation, you have a number of rights in relation to your personal information.

These include:

• Right of access: You can request a copy of the personal information we hold about you.
• Right to rectification: You can ask us to correct inaccurate or incomplete personal information.
• Right to erasure: You can ask us to delete your personal information in certain circumstances.
• Right to restrict processing: You can ask us to limit how your personal information is used in certain circumstances.
• Right to object: You can object to processing based on public task grounds in certain circumstances.
• Right to data portability: In certain circumstances, you can request that personal information you provided to us is transferred to you or another organisation.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time.

These rights are subject to applicable legal conditions and exemptions and may vary depending on the lawful basis for processing.

You will not normally be charged for exercising your rights.

We will usually respond to your request within one calendar month.

To make a request, please contact the practice or download our Subject Access Request Form.

How to complain

If you have concerns about how we collect, use or protect your personal information, please contact us in the first instance.

Email: nnicb-bassetlaw.larwoodsurgery@nhs.net

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how your personal information has been handled.

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

Updates to this privacy notice

We regularly review this privacy notice to ensure that it remains accurate, up to date and reflects how we process personal information.

Last updated: 9 October 2026

Next review: 9 March 2027