User Privacy Policy for the Service

**Telephone:** 0207 967 1577
**Email:** enquiries@thecentreforhealth.co.uk

We collect and use the following categories of information to provide healthcare services:

3.1 General Personal Information
– Name, address, and contact details
– Gender
– Pronoun preferences
– Date of birth
– Insurance information
– Payment details

3.2 Health and Care Information (Special Category)
– Medical conditions and history
– Allergies and medication
– Care needs and support requirements
– Test results (blood tests, scans, psychological assessments, etc.)
– Dietary requirements and home environment where relevant

3.3 Crime Prevention and Security
– CCTV images in public areas
– Witness statements
– Relevant information from previous investigations

3.4 Safeguarding Information
– Information needed to protect individuals at risk
– Records of decisions and assessments

3.5 Patient App / Portal Information
– Account registration details
– Security and access information

3.6 Recruitment Information
– Personal details provided in job applications
– Employment history
– Right-to-work documents
– Criminal record checks (where applicable)

3.7 Marketing and Communications
– Email address for optional marketing communications (only with explicit consent)

We use personal information for:
– Providing healthcare and treatment
– Managing appointments and continuity of care
– Meeting legal and regulatory obligations
– Safeguarding individuals
– Responding to queries, complaints, or claims
– Maintaining records and ensuring clinical quality
– Recruitment and workforce administration
– Optional marketing (only with explicit consent)

Under the UK GDPR, our main lawful bases are:

5.1 Article 6 Bases
– **Legal obligation:** when we must process data under healthcare, safeguarding, or regulatory law.
– **Contract:** providing services you request.
– **Vital interests:** where someone is at immediate risk of serious harm.
– **Consent:** for optional activities such as targeted advertising.

5.2 Article 9 Bases (Special Category Data)
For health-related data, we rely on:
– **Provision of health or social care (Article 9(2)(h))**
– **Legal obligations and safeguarding requirements**
– **Vital interests**
– **Explicit consent (Article 9(2)(a))** — used only for optional marketing involving custom advertising audiences

We do **not** rely on legitimate interests for processing health or care information.

We will only use your email address for marketing **if you give explicit, separate consent**.

6.1 Email Marketing
If you choose to opt in, we may send you updates about services, clinics, and related healthcare information.
You can withdraw consent at any time.

6.2 Meta (Facebook/Instagram) Custom Audiences
If you give explicit consent, we may use **your email address only** to create a custom audience on Meta platforms. This allows us to show advertising to users who match or resemble existing patients.

– No health information is uploaded.
– No demographic information is uploaded.
– Only your email address is shared with Meta in hashed format.
– Meta uses the email only to match your profile for advertising purposes.

You may withdraw consent at any time, and you will be removed from custom audience lists.

6.3 Withdrawing Consent
You can withdraw consent by contacting us at **enquiries@thecentreforhealth.co.uk**. Withdrawal does not affect the lawfulness of processing already carried out.

– Directly from you
– Other health and care providers
– Social services and safeguarding agencies
– Insurers
– Regulatory bodies
– Previous employers (for recruitment)
– Publicly available sources

We keep your healthcare records for **10 years** from your last contact with us. After this period, records are securely deleted.

Other types of data may be kept for shorter periods in line with legal or regulatory requirements.

We may share personal information with:
– Pharmacy providers (for dispensing medication and related clinical services)
– GPs, consultants, pharmacy providers, and other care providers
– Insurance companies
– Safeguarding bodies and local authorities
– Emergency services
– Regulators, auditors, and inspectors
– Legal bodies (where required by law)
– Meta Platforms (email only, and only with explicit consent for advertising)

We will not sell your information.

Duty of Confidentiality
Health information is confidential. We only share it when:
– You give consent
– There is a legal requirement
– Vital interests apply
– Safeguarding/public protection concerns justify disclosure

Our website uses basic cookies to ensure the site functions properly. These cookies:
– Do **not** identify you personally
– Do **not** track your browsing activity across other websites
– Do **not** collect or store information about who is viewing the site

We only use essential cookies necessary for security, performance, and accessibility. You can control or delete cookies through your browser settings.

You have the right to:
– Access your personal information
– Request correction or deletion
– Restrict processing
– Object to processing (where applicable)
– Request data portability (where applicable)
– Withdraw consent (for consent-based processing)

To exercise your rights, contact us using the details above.

If you have concerns about our use of your data:

**1. Contact us first:**
Email: enquiries@thecentreforhealth.co.uk

**2. If unresolved, you may contact the ICO:**
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk/make-a-complaint