Privacy at Smart General Practice
Last updated: 5 October 2026
Smart General Practice is committed to protecting your privacy and meeting our responsibilities under the UK General Data Protection Regulation (UK GDPR). This policy explains how we collect, use, and safeguard personal data when you visit our website or use our services, including SMART Navigation, SMART Voice and SMART Consult.
Who we are
Smart General Practice Ltd develops digital tools for UK general practice, built by GPs for GPs. Our products include SMART Navigation, a care navigation tool that gives reception teams structured scripts and clinical safety prompts; SMART Voice, which answers practice phone calls; and SMART Consult, a clinically structured econsultation system.
What information we collect
When patients use our products, or practice staff use them on a patient’s behalf, information such as age, symptoms, and responses to structured clinical questions may be recorded. This information is processed to support safe care and may be attached to the patient’s GP record within the clinical system. We may also collect personal information from GP practices or business representatives who contact us directly, such as names, organisational details, email addresses, and telephone numbers. In addition, when you browse our website, we may collect anonymised usage information including browser type, device type, and general interaction data. We do not knowingly collect data from children without the involvement of a registered GP practice.
How we use your information
Patient information recorded in our products is used exclusively to support safe care and to ensure that the patient is directed to the most appropriate service. The information may be stored within the GP record as a consultation summary, but our products do not make clinical decisions. Information collected from GP practices or business representatives is used to respond to enquiries, support onboarding, and manage service delivery. Website usage data is analysed to improve the performance and usability of our services. At no stage is patient information used for advertising or profiling.
Legal basis for processing
Our use of personal data is supported by several lawful bases under UK GDPR. These include legitimate interests, such as providing safe and effective services and ensuring the security of our platforms. In some cases, data processing is necessary to fulfil our contractual obligations to GP practices. We may also process information in order to meet legal obligations, including compliance with NHS standards and regulatory audits. Where explicit consent is required, for example when an individual signs up for optional communications, this will always be obtained in advance.
Data security and storage
All data is processed and stored using strong technical and organisational safeguards, including encryption, access controls, and continuous monitoring. Data is hosted in the United Kingdom within NHS-approved environments, and access is limited to authorised personnel only. Patient information recorded in our products is held temporarily to ensure secure delivery to the GP practice, after which responsibility for retention rests with the practice itself in accordance with NHS and regulatory requirements.
Sharing your data
We only share personal data where necessary and lawful. This includes: GP practices who receive and review information submitted through our products. Trusted UK-based service providers under strict data processing agreements. Public authorities, where required by law or regulation (e.g. safeguarding, court orders). We do not sell personal data, nor do we share it with advertisers or unrelated third parties.
Cookies and tracking
Our website uses a limited number of cookies that are necessary for essential features and for monitoring usage patterns. These cookies do not store personal identifiers unless you actively choose to submit them. You can manage your cookie preferences at any time by adjusting your browser settings.
Your rights
As a data subject under the UK GDPR, you have rights over your personal information. These include the right to access the data we hold about you, the right to request correction of inaccurate information, and, in certain circumstances, the right to request deletion of your data. You may also object to or restrict the way we process your data. If you are dissatisfied with the way your information is handled, you have the right to raise a complaint with the Information Commissioner’s Office (ICO). For patient information entered into our products, you should in the first instance contact your GP practice. For all other enquiries you may contact us directly using the details provided below.
Controller responsibilities
When our products are used in a GP practice, the practice itself acts as the Data Controller for patient information recorded in the clinical system. Smart General Practice operates as a Data Processor, providing the secure platform and technical infrastructure. For data collected from website visitors or from business representatives contacting us directly, Smart General Practice is the Data Controller.
Contact us
If you have any questions about this policy or wish to exercise your rights, please contact:
Smart General Practice Ltd
Email: hello@smartgeneralpractice.com
Address: 16 Highfield Road, Bramley, Leeds, West Yorkshire, LS13 2BL.
We are committed to handling your data with care and in line with NHS and legal standards.
This policy may be updated from time to time to reflect regulatory changes or improvements to our service. The most recent version will always be available on our website.