Privacy notice

Who we are

My Private Medical provides skin and aesthetic treatment, medical hair loss treatment, private GP appointments, blood testing and health screening from 19 Lichfield Street, Walsall WS1 1UG. You can contact us on 0121 751 8001.

We are the data controller for personal information collected through this website and our clinic services, unless we tell you otherwise. We are committed to protecting your privacy. This notice explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect

Depending on how you interact with us, we may collect:

• Identity and contact details — name, phone number, email address, postal address and postcode
• Appointment information — bookings, attendance and the service you have asked about
• Health information — the clinical detail needed to assess you, provide care and keep accurate records
• Enquiry details — your area of concern, treatment interest, and anything you share when you contact us
• Communications — correspondence you send us by phone, email or through this website
• Technical data — IP address, browser type, pages visited and referral source, collected automatically where cookies apply

How we use your information

We use personal data to arrange and deliver appointments, provide clinical services, respond to enquiries, manage complaints, meet legal and regulatory obligations, maintain accurate clinical records, and improve this website.

Lawful basis (UK GDPR Article 6): We rely on contract (to provide the service you request), legitimate interests (to operate the clinic, respond to enquiries and understand how the site is used), legal obligation (where the law requires us to process data), and consent where that is the appropriate basis, for example separate marketing consent.

Health information (Article 9): Health data is special category data. For clinical care we rely on Article 9(2)(h) — health or social care — and, where applicable, explicit consent under Article 9(2)(a) for purposes such as marketing or certain enquiries where a clinical relationship is not yet established.

Who we share information with

We do not sell your personal data. We may share information with:

• Laboratories and pathology partners processing test samples
• Clinicians and staff involved in your care
• IT, booking, CRM and communication providers acting on our instructions as processors
• Professional advisers, insurers and auditors where necessary and proportionate
• Regulators, courts or law enforcement where required by law or in defence of legal claims

We require processors to protect your information under contract and only use it for the purposes we specify. We will not share your data with third parties for their own direct marketing purposes.

International transfers

We aim to keep personal data within the UK. Where a supplier processes data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR, such as an adequacy decision or standard contractual clauses. You can ask us which safeguard applies to a particular transfer.

How long we keep information

We retain personal data for as long as necessary to provide care, meet legal and regulatory requirements, and resolve disputes. Clinical records for adults are retained for a minimum of eight years after the date of last treatment, in line with recognised medical record-keeping standards. Enquiry and marketing records are held for a shorter period. Retention periods vary by record type and are applied consistently. You may request deletion of your data at any time (see Your rights below).

Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Records are held on secure systems with access limited to staff who need it. Any supplier processing data on our behalf is contractually required to maintain equivalent security standards.

Cookies

This website uses cookies to help it function and, with your consent, to understand how the site is used. For full detail see our cookie notice.

Other websites

This site may link to external websites. Once you leave our site we are not responsible for the privacy practices of those sites, and we encourage you to review their own policies.

Marketing communications

Where you have agreed to receive marketing from us, you can opt out at any time by telling us at the clinic, calling us, or using the unsubscribe link in any marketing email. We will action your request promptly and in any event within 10 working days. Opting out of marketing does not affect communications about your care or appointments.

Your rights

Under UK GDPR you may have the right to:

• Be informed — to know how we use your data, which is the purpose of this notice
• Access — to request a copy of the data we hold about you
• Rectification — to have inaccurate data corrected
• Erasure — to request deletion of your data, subject to our record-keeping obligations
• Restrict processing — to limit how we use your data
• Data portability — to receive certain data in a portable format
• Object — to object to processing based on legitimate interests, or to direct marketing at any time
• Automated decisions — not to be subject to solely automated decision-making that significantly affects you. We do not make clinical decisions by automated means.

These rights depend on the circumstances and some are qualified, particularly where we must retain clinical records by law. You may withdraw consent where processing is based on consent, without affecting the lawfulness of earlier processing. We respond to rights requests within one month.

Changes to this notice

We may update this notice from time to time. The current version is always available on this page, and the date at the top shows when it was last revised.

Contact us about privacy

Call 0121 751 8001 or write to: My Private Medical, 19 Lichfield Street, Walsall WS1 1UG.

You also have the right to complain to the Information Commissioner's Office (ICO). We would ask you to raise it with us first so we have the chance to put it right.

Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113 · ico.org.uk