Privacy Policy

Your Privacy Matters to Us

At the London Gastroenterology Centre, we are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018. This Privacy Statement outlines how we handle your personal data.

Data Controller

London Gastroenterology Centre is the data controller responsible for your personal data.

You can contact us at:
London Gastroenterology Centre
35 Ballards Lane, London, N3 1XW, United Kingdom
Tel: 020 7183 7965
Email: info@gastrolondon.org.uk

Personal Data We Collect

We collect and process the following categories of personal data:

• Identification Data: Name, address, date of birth, contact information.
• Health Data: Medical history, treatment records, prescriptions, test results.
• Financial Data: Insurance details, billing information.
• Other Data: Any other information you provide us.

Purpose and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

• Medical Care: To provide you with healthcare services (Article 6(1)(e) and Article 9(2)(h) of
• the GDPR).
• Communication: To contact you regarding appointments and medical information (Article
• 6(1)(e)).
• Billing and Insurance: To process payments and insurance claims (Article 6(1)(b)).
• Legal Compliance: To comply with legal and regulatory requirements (Article 6(1)(c)).
• Consent: With your explicit consent where required (Article 6(1)(a) and Article 9(2)(a)).

Data Sharing

We may share your personal data with:

• Healthcare Providers: Other medical professionals involved in your care.
• Insurance Companies: For processing claims.
• Legal Authorities: When required by law.
• Third-Party Service Providers: For services such as laboratory tests or imaging.

International Data Transfers

Your personal data is stored and processed within the UK. If we need to transfer your data outside the UK, we will ensure it is protected by appropriate safeguards in compliance with GDPR.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including secure storage systems, encryption, and access controls.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal and regulatory requirements. Typically, this means retaining your medical records for a minimum of 10 years after your last treatment.

Your Rights

Under GDPR, you have the right to:

• Access: Request access to your personal data.
• Rectification: Request corrections to your personal data if inaccurate.
• Restriction: Request the restriction of processing your personal data.
• Data Portability: Request the transfer of your personal data to another organization.
• Object: Object to the processing of your personal data in certain situations.
• Withdraw Consent: Withdraw your consent where processing is based on consent.

Right to Erasure

Under the GDPR rules, if processing is necessary for the purposes of medical diagnosis or for the provision of health care, the right of erasure does not apply. Please note, however, that medical professionals have a legal obligation of professional secrecy. To exercise your rights, please contact us using the details provided above.

For more details, please see https://ico.org.uk/for-organisations/uk-gdpr-guidance-andresources/ individual-rights/individual-rights/right-to-erasure/

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: www.ico.org.uk

Effective Date: 8th June 2023

Company Registration Number: 07556397