Patient Data

BHL takes great care to ensure it has the systems and processes in place and working effectively for safeguarding the quality of patient care and the integrity/confidentiality of patient records. BHL is bound by the Data Protection Act (2018) and General Data Protection Regulation (GDPR).

Any information held by BHL will be used, & shared with other service providers, in order to provide a service to you.

BHL provides a set of services, in response to requests from a referrer, for example this could be your GP. Until that request is made BHL does not hold any data about you. When the referrer decides to refer you to BHL they should explain to you that BHL will then see some of your clinical information. They should obtain your consent for your information to be shared with BHL. Data is shared so that BHL can provide you with the right service. 

Information will not be shared outside BHL for any other purpose, unless very exceptional circumstances apply, such as if we were required to do so by law or if another person was at risk of serious harm. We would always try to tell you first before breaking your confidence and explain why.

We will record new information about you, for example appoint dates that we have arranged. We also record telephone conversations - this is solely in order to ensure the quality of our service.

Any information about you – provided by your referrer or collected from you, may be:

  • recorded
  • shared in order to provide you with care
  • used to support local clinical audit and to monitor the quality of care provided.
  • Collated in an anonymised form to justify our funding

We have a duty to:

  • maintain full and accurate records of the care we provide to you
  • keep records about you confidential, secure and accurate. Any breach of these safeguards by BHL staff is regarded as a serious disciplinary offence
  • provide information in a format that is accessible to you.
  • retain the information for a minimum period set out in NHS standards.  If you would like more detail on this please use the contacts below.

We may also contact you to:

  • request feedback about a service you have received
  • seek your help in a research or service redesign project.

Patient Rights:


The Data Protection Act 2018 gives everyone the right to know what information is being held about them. You can request a copy of the information held by BHL.


Besides the right to see your records, you have other rights under the Data Protection Act. These include:

  • The right to be informed - This is the purpose of the document you are reading. We want to be as clear as possible about how we use personal data.
  • The right to erasure - You have the right to ask for your information to be erased. This can have a marked impact on the services we can provide so if at all possible please discuss this with us first.
  • The right to rectification - You have the right to have your personal data rectified if you believe it to be incomplete or inaccurate. Having full & complete information can only improve our service to you.
  • The right to erasure - This can have a marked impact on the services we can provide so if at all possible please discuss this with us first.
  • The right to restrict processing - This means that you could restrict who sees certain parts of your record. Like the right to erasure this can have quite an impact on the services we can provide so please discuss first.
  • The right to portability - allows you to obtain and reuse your personal data for your own purposes. This only applies to information you have provided to us.
  • The right to object - You have the right, in certain circumstances, to object to us processing your information.
  • Rights relating to automated decision making and profiling. Please note that BHL does not use these functions.

If you wish to know more about BHL’s handling of information, what information is held about you, and why we need the information, our Chief Executive will be pleased to help you. Please see the ‘Contact BHL’ tab for details.


If you are still not happy with the outcome, you can contact the Information Commissioner (the authority responsible for regulating and enforcing the Data Protection Act) at the following address:

Information Commissioners Office

Wycliffe House

Water Lane


Cheshire SK9 5AF

Tel: 0303 123 1113


If you wish to see our privacy notice please click here

River House (the site of the Old Mill), Bexley High Street, Kent, DA5 1JX Tel: 020 8269 3444 Fax: 013 2231 5373