Shared Care and GP Connect Privacy Information

At Montpellier Care Company Ltd, we are committed to protecting your personal information and ensuring it is used safely, securely and lawfully. To help us provide safe, effective and coordinated care, we may access and share relevant health information using NHS systems, including GP Connect, where appropriate.

What is GP Connect?

GP Connect is a secure NHS service that allows authorised health and care professionals involved in your direct care to access relevant information held in your GP record. This helps ensure that the professionals supporting you have the information they need to provide safe, high-quality care.

We will only access your GP record when:

You are receiving care from Montpellier Care Company Ltd.
There is a legitimate relationship between you and our organisation.
Access is necessary to support your direct care.
Our staff are authorised and trained to use NHS systems appropriately.

What information may be accessed?

Where appropriate, authorised staff may access relevant information such as:

Your name, address, date of birth and NHS number.
Current medications.
Allergies and adverse reactions.
Medical conditions and diagnoses.
Care plans relevant to your care.
Clinical observations and other information necessary to support your treatment and care.

We only access the minimum information necessary to provide your care.

Why we use this information

Access to your health information helps us to:

Provide safe and effective care.
Reduce the need for you to repeat your medical history.
Support continuity of care with your GP and other NHS professionals.
Help prevent medication errors and improve patient safety.
Deliver coordinated care when you need support from multiple organisations.

How your information is protected

All information is accessed through secure NHS systems. Access is restricted to authorised staff who have received appropriate information governance and confidentiality training.

Every access to your record is logged and auditable. Unauthorised access to patient information is treated as a serious disciplinary matter.

Legal basis
Montpellier Care Company Ltd processes your personal information in accordance with:

UK General Data Protection Regulation (UK GDPR).
Data Protection Act 2018.
Common Law Duty of Confidentiality.
Applicable health and social care legislation.

For direct care, the lawful basis for processing is generally:

Article 6(1)(e) UK GDPR – task carried out in the public interest.
Article 9(2)(h) UK GDPR – provision of health or social care.

Your rights
You have the right to ask how your information is used and to raise any concerns about the way your information is processed.

If you have questions about GP Connect or how your information is shared, please contact:

Melanie Wareham
Montpellier Care Company Ltd

You can also speak to your GP practice if you have questions about information held within your GP record.

Further information
For more information about how we process your personal information, please refer to our Patient Privacy Notice and the Harrogate and District NHS Foundation Trust Patient Privacy Notice:

https://www.hdft.nhs.uk/privacy-notices/patients-privacy-notice/

If you remain unhappy about how your personal information has been handled, you have the right to contact the Information Commissioner's Office (ICO).

Last reviewed: July 2026