Privacy notice

For UK data protection purposes, we are responsible for deciding how and why your personal information is processed.

If you have questions about how we use your information, please contact us using the details above.

Depending on how you use our website and services, we may collect the following information:

Personal information

• Full name
• Date of birth, where required
• Email address
• Telephone number
• Address
• Appointment date and time
• Appointment type, such as consultation or follow-up
• Payment and transaction information
• Information you provide when contacting us

Health and medical information

Where necessary for providing healthcare services, you may provide information relating to your health, medical history, symptoms, conditions, treatment or other healthcare information.

Health information is treated as special category personal data under UK data protection law and is subject to additional safeguards.

We will only collect health information that is necessary and relevant for providing or managing healthcare services.

We may use your information to:

• Process and manage appointment requests.
• Arrange consultations and follow-up appointments.
• Contact you regarding your appointment.
• Respond to enquiries and requests.
• Provide healthcare and related services.
• Maintain appropriate medical and administrative records.
• Process payments and manage transactions.
• Send appointment-related communications.
• Manage cancellations, changes and other appointment administration.
• Maintain the security and functionality of our website.
• Meet legal, regulatory and professional obligations.
• Prevent or investigate fraud, misuse or security incidents.
• Handle complaints and enquiries.

We will not use your medical information for purposes unrelated to your healthcare without an appropriate legal basis.

Under UK data protection law, we must have a lawful basis for processing personal information. Depending on the circumstances, this may include:

• Contract: where processing is necessary to provide a service you have requested or to take steps at your request before providing that service.
• Legal obligation: where we are required to process information to comply with applicable law.
• Legitimate interests: where processing is necessary for our legitimate business or administrative interests and those interests are not overridden by your rights.
• Consent: where we ask for your consent for a particular use of your information.

Where we process health information or other special category data, we will also rely on an appropriate condition under Article 9 of the UK GDPR and, where applicable, the Data Protection Act 2018. The appropriate condition depends on the specific purpose and circumstances of the processing.

When you submit an appointment request through our website, we may collect information such as your name, contact details, selected appointment type, preferred date and time, and any other information required to process your request.

We use this information to process your appointment request and provide the requested healthcare service.

Submitting an appointment request does not necessarily mean that an appointment has been clinically or administratively confirmed. We may contact you where further information or confirmation is required.

Where you choose to pay for an appointment online, payment processing may be provided by a third-party payment provider such as Stripe.

We do not normally receive or store your full card number or card security code on our own systems. Payment information is processed by the relevant payment provider in accordance with its own privacy and security practices.

We may receive information such as:

• Payment status
• Transaction reference
• Amount paid
• Currency
• Date and time of payment
• Limited payment-related information necessary to manage your appointment

You should review the payment provider's privacy information for further details about its processing of personal data.

We may share personal information where necessary with:

• Healthcare professionals involved in providing your care.
• Staff and administrators who need the information to manage appointments and services.
• Payment service providers.
• Website, hosting and IT service providers.
• Email or communications providers where required to communicate with you.
• Professional advisers where necessary.
• Regulators, authorities or law-enforcement bodies where we are legally required to do so.
• Other organisations where sharing is necessary and permitted by law to provide healthcare services.

We only share information where there is an appropriate reason and legal basis for doing so.

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place as required by applicable data protection law.

Where required, further information about relevant international transfers and safeguards can be obtained by contacting us.

We take appropriate technical and organisational measures to protect personal information against:

• Unauthorised access
• Accidental loss
• Unauthorised disclosure
• Alteration
• Destruction
• Other unlawful or unauthorised processing

Access to personal and health information is limited to people who need it for legitimate healthcare, administrative or legal purposes.

However, no online system or method of electronic transmission can be guaranteed to be completely secure.

We retain personal information only for as long as necessary for the purposes for which it was collected, including where necessary to meet legal, regulatory, accounting, medical-record or professional requirements.

The length of time information is retained may depend on:

• The type of information.
• The purpose for which it was collected.
• Whether you have received healthcare from us.
• Applicable legal and professional requirements.
• Whether the information may be required to establish or defend legal claims.

Where a specific retention period applies, we will retain the information for that period. When information is no longer required, it will be securely deleted or otherwise disposed of in accordance with our procedures.

Depending on the circumstances and applicable legal requirements, you may have rights including:

• The right to request access to your personal information.
• The right to request correction of inaccurate or incomplete information.
• The right to request erasure of your personal information in certain circumstances.
• The right to request restriction of processing in certain circumstances.
• The right to object to certain processing.
• The right to data portability where applicable.
• The right to withdraw consent where processing is based on consent.

These rights are not absolute and certain exemptions may apply, particularly where information forms part of healthcare or medical records and there is a lawful reason for retaining or processing it.

To exercise a data protection right, please contact us using the contact details provided above.

Our website may use cookies and similar technologies to operate the website, maintain security, remember preferences, and understand how the website is used.

Some cookies may be strictly necessary for the website to function.

Where applicable, non-essential cookies will only be used in accordance with applicable UK privacy and data protection requirements.

You can manage certain cookie preferences through your browser or our cookie-management tools where available.

Our website may use third-party services for functions such as:

• Website hosting
• Payment processing
• Security
• Analytics
• Email or communications
• Appointment management

These providers may process personal information on our behalf where necessary to provide their services.

We take reasonable steps to ensure that third-party providers processing personal information for us provide appropriate security and privacy protections.

Our services are primarily intended for adults unless otherwise stated.

If we knowingly provide services to children or process information about children, we will apply appropriate safeguards and comply with applicable UK data protection requirements.

Parents or guardians should contact us if they have concerns about information relating to a child.

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or how we process personal information.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

We recommend checking this page periodically for the latest version.

If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to address your concerns.

You also have the right to complain to the UK's data protection regulator:

You can find information about making a complaint through the ICO's website.

If you have any questions about this Privacy Policy, how we use your personal information, or how to exercise your data protection rights, please contact: