Website Privacy policy
Last Updated: Friday, 30 January 2026Website Privacy Policy
1. Introduction
Grassendale Medical Practice (“the Practice”, “we”, “us”) manages this website and is committed to protecting the privacy and security of visitors’ information.
This notice explains what information we collect when you use our website, how we use it, and your rights.
This notice applies only to information collected through this website, not to clinical systems or direct patient care (which is covered by our Practice Privacy Notice / Patient Privacy Notice).
2. What personal data we collect via this website
You can browse most pages without telling us who you are. We only collect personal information when you voluntarily provide it - for example, through:
- Online contact forms
- Registration or prescription request forms
- Feedback or complaints forms
When you submit personal data through these forms, we collect information such as your:
- Name
- Contact details
- Information included within your message
We do not collect special category medical data through the public website unless you choose to include it in a form.
3. What we do with the information you provide
Personal information submitted via online forms is used only to:
- Respond to your enquiry or request
- Direct your message to the correct team
- Provide the service you have asked for
We only use your information for the purpose for which you provided it.
We do not use your information for marketing.
We will never share your information with third parties unless:
- You give explicit consent
- It is required by law (e.g. serious crime, safeguarding)
4. How we protect your information
We take appropriate technical and organisational measures to protect your data, including:
- Encrypted transmission (HTTPS)
- Access controls
- Internal policies and staff training
- Secure NHS‑accredited data processors (where used)
5. Log data collected for website analytics and security
Each time you visit the site, we automatically collect the following non‑identifiable information:
- IP address (anonymised where possible)
- Browser type and version
- Operating system
- Pages visited and the time spent on them
- Date and time of visit
- Referring website
This data does not identify you personally and is used to:
- Improve website performance
- Diagnose technical issues
- Ensure security and reliability
- Understand which pages are most useful
6. Cookies
Cookies are small text files stored on your device. They help us make the site work and improve your experience.
Cookies used on this website fall into two categories:
a) Essential (required) cookies
These are necessary for the website to function and cannot be switched off.
Typical examples include:
- Session management cookies
- Cookie‑consent settings
- Load‑balancing or security cookies
b) Analytics cookies (optional)
If enabled, these allow us to measure how visitors use the site so we can improve it.
We only use analytics cookies with your consent via the cookie banner.
*We no longer use the outdated Google Universal Analytics (_utm cookies).**
If Google Analytics 4 (GA4) or an NHS‑approved equivalent is enabled, cookies may include:
| Name | Purpose | Expires |
|---|---|---|
| _ga | Distinguishes users | 2 years |
| _ga_XYZ | Session state | 2 years |
You can manage or delete cookies at any time using your browser settings.
7. Third‑party services
Our website may include links to external websites (e.g., NHS.uk).
We are not responsible for the privacy practices of external sites, and we encourage you to read their privacy notices.
8. Your rights under UK GDPR
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (where applicable)
- Restrict processing
- Object to processing
- Make a complaint to the ICO
To exercise your rights or contact our Data Protection Officer (DPO), please see the Practice’s main Privacy Notice or contact the surgery directly.
9. Changes to this Privacy Policy
We may update this notice to reflect changes in law or website functionality.
Any changes will be published on this page with the revised date.