Our Privacy policy
Effective Date: 13 November 2025
1. Introduction
Concierge Clinicians (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, process, and protect your personal data, including sensitive health information, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are registered with the Information Commissioner’s Office (ICO) as a data controller.
2. What Information We Collect
We may collect and process the following data about you:
Personal Identification Data: Your name, email address, phone number, and residential address, provided by you through our contact forms or during consultations.
Special Category (Sensitive) Health Data: Information relating to your physical or mental health, medical history, treatments, diagnoses, and information about healthcare providers. We only collect this data directly from you or from third parties (like specialists) on your behalf with your explicit consent.
Technical Data: Information collected automatically when you visit our website, such as your IP address, browser type, and operating system (please see our Cookie Policy for details).
3. How We Use Your Information
We use your data for the following purposes:
To Provide Our Services: To deliver our medical coordination, advocacy, wellbeing, and crisis support services. This requires processing your health data to liaise with specialists, arrange appointments, and manage your care plan.
To Communicate With You: To respond to your enquiries, send you information about your care, and manage our client relationship.
To Improve Our Website: To analyse how our website is used so we can improve the user experience.
To Comply With Legal Obligations: To maintain records as required by law (e.g., healthcare and financial regulations).
4. Our Lawful Basis for Processing
We will only process your data when we have a lawful basis to do so:
To Fulfil a Contract: When we need to process your personal data to provide the services you have requested.
Explicit Consent: We will always ask for your explicit, written consent before collecting or processing any Special Category (Health) Data. You have the right to withdraw this consent at any time.
Legitimate Interests: When we process your data for our legitimate business interests, such as responding to general enquiries or improving our website, without overriding your rights.
Legal Obligation: When we are required to process your data to comply with the law.
5. Data Sharing and Confidentiality
Your privacy is our utmost priority. We do not sell your data to any third parties.
We may share your data with:
Healthcare Providers (Third Parties): Specialists, consultants, clinics, and hospitals only with your explicit consent for the purpose of arranging and coordinating your care.
Our Service Providers: IT, website, and administrative service providers who act as our data processors and are bound by strict confidentiality and data protection agreements.
Regulatory Bodies: If required by law, we may disclose information to regulatory bodies, law enforcement, or as part of legal proceedings.
All sensitive health data is treated as strictly confidential.
6. Data Security
We have implemented robust technical and organisational security measures to protect your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. This includes data encryption, access controls, and secure storage.
7. Data Retention
We will only retain your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. For health-related data, we are guided by professional and legal retention periods for medical records.
8. Your Data Protection Rights
Under UK data protection law, you have the following rights:
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of any inaccurate or incomplete data.
Right to Erasure: To request that we delete your personal data (“right to be forgotten”) where there is no compelling reason for us to keep it.
Right to Restrict Processing: To request that we suspend the processing of your data in certain circumstances.
Right to Data Portability: To request the transfer of your data to you or a third party in a machine-readable format.
Right to Object: To object to us processing your data (e.g., for direct marketing).
Right to Withdraw Consent: To withdraw your consent at any time, particularly for the processing of your health data.
To exercise any of these rights, please contact us at info@conciergeclinicians.co.uk.
9. How to Complain
If you have any concerns about our use of your personal data, you can make a complaint to us at info@conciergeclinicians.co.uk.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection.
Website:
https://www.ico.org.ukHelpline: 0303 123 1113
10. Changes to This Privacy Policy
We may update this policy from time to time. The latest version will always be posted on this page. This policy is effective as of 13 November 2025.