The MCCR is operated under a joint data controllership model, where multiple organisations work together to determine the purposes and means of processing your information.
 
 St Helena Hospice (ICO no. Z7113713) acts as the designated central coordination point for MCCR and as a joint controller alongside participating health and care organisations. A full and expanding list of joint controllers is provided in the Appendix at the end of this notice.

The MCCR geography covers, Suffolk, Norfolk and North East Essex
 
 For privacy queries, please contact:
 Data Protection Officer, St Helena Hospice
 Email: dpo@sthelena.org.uk
 Tel: 01206 845577
 For clinical privacy concerns, contact: caldicott.guardian@sthelena.org.uk

Name, address, date of birth, contact details, NHS number, communication preferences, demographic details, next of kin.

Information relating to health and wellbeing, diagnoses, care preferences including end‑of‑life wishes, ethnicity and religious beliefs.

- Record your care preferences clearly and consistently
 - Share essential information with the services supporting you
 - Ensure clinicians have information needed for coordinated care
 - Support appropriate updates over time

Processing is based on:
 • Article 6(1)(e) – performance of a task in the public interest
 • Article 9(2)(h) – provision of health or social care
 Supported by the Health and Social Care Act 2008 (Regulated Activities) Regulations 2014.

Your information is shared securely with health and care organisations involved in your direct care including GPs, community nursing teams, hospitals, hospices, care homes, and paramedic services.
 
 Technical and hosting arrangements:
 - Developed and hosted by CareIS Ltd (data processor)
 - Data stored on UK-based Microsoft Azure
 - Secure login with multi-factor authentication where applicable

- Encrypted storage and secure hosting
 - Role‑based access controls
 - Multi‑factor authentication where applicable
 - Audit logs for all access and changes
 - Formal data sharing agreements
 
 There are no international transfers of MCCR data.

- Access (subject access request, one month response time)
 - Rectification
 - Erasure (limited; stub retained if removed)
 - Restriction
 - Objection
 - Complain to the ICO (www.ico.org.uk)

Your record remains on MCCR while you are alive unless you withdraw consent. If withdrawn, the record is locked and retained according to St Helena policies. After death, records follow clinical and regulatory retention requirements. Data is held in line with the Records Management Code of Practice 2023

You may withdraw permission at any time by informing a healthcare professional involved in your care or contacting info@mycarechoices.online

This notice will be updated as the MCCR expands or if regulations change. 

A full and expanding list of joint controllers will be maintained as organisations join the MCCR programme.
 - St Helena Hospice
- Highwoods Surgery
- Mill Rd Surgery
- Creffield MG
- Caradoc Surgery
- Rowhedge Surgery
- Turner Rd Surgery
- North Clacton MP
- Clacton Community Practice
- Winstree Surgery
- Abbey Field
- Walton Medical
- Tiptree Medical
- Priscilla Bacon Hospice
- The Freshford Practice
- Hedingham Medical Centre
- Colchester Medical Practice
- Harewood Surgery
- Clacton Community Practice
- North Chelmsford Healthcare Centre
- Elizabeth Courtauld Surgery
- The Ardleigh Surgery
- Tollgate Surgery
- The Firs Care Service
- Mersea Island Medical Centre
- Bluebell Surgery
- Riverside Health Centre
- Ambrose Ave Group
- Great Bentley Surgery
- Tiptree Medical Surgery
- Brooklyn House
- St Elizabeth Hospice
- Fressingfield Medical Centre
- Saxmundham Health Centre
- Howard Health Surgery
- The Peninsula Practice
- Woolpit Health Centre
- Rookery Medical Centre
- Brandon Medical Practice
- Orchard House Surgery
- Stanton Surgery
- Two Rivers Medical Centre
- Framfield House Surgery
- Bethesda Eventide Homes
- Wickhambrook Surgery
- Market Cross Surgery
- Unity Healthcare
- Mendlesham Medical group
- Partnership in Care Group
- Needham Market Country practice
- Holbrook & Shotley Surgery
- Saxmundham Health
- Barrick Lane Medical Centre
- Hadleigh Health Centre
- Dedenahm Group Practice

Data Processor:
CareIS Ltd – system development, hosting, and technical support.