Data security
Where your clinical information is held, how it is protected, who can see it, and what we do if something goes wrong.
Draft for review by Medhub LTD before publication.
Why this matters
Health information is among the most sensitive data anyone holds. This page explains, in plain terms, how Cheshire Clinics keeps yours safe. It sits alongside our Privacy Notice, which explains what we collect and why.
Where your data lives
• Your clinical record, bookings and video consultations are held in Semble, a clinical system built for UK healthcare, hosted on secure, encrypted infrastructure in the UK or EEA.
• Prescriptions pass through SignatureRx to your chosen pharmacy using encrypted electronic transfer.
• This website is hosted by Webflow. It does not store your clinical record; contact-form messages are delivered to us by email and deleted from the website once actioned.
• We do not store card numbers. Payments are processed by our booking platform's payment provider.
How it is protected
• Data is encrypted in transit and at rest.
• Access is limited to the people who need it to care for you, protected by individual accounts, strong passwords and multi-factor authentication, and reviewed regularly.
• Consultation video is not recorded unless you are told and agree.
• Devices used to access patient data are encrypted, kept up to date and can be wiped remotely if lost.
• Every doctor and member of staff completes data protection and information security training before handling patient information, and annually thereafter.
• Suppliers who process data on our behalf do so under written contracts that meet UK GDPR requirements.
Sharing
We share information only as set out in the Privacy Notice: with your pharmacy, test provider or interpreter to deliver your care; with your NHS GP with your consent or where safeguarding requires it; and with regulators or the courts where the law requires.
If something goes wrong
We keep a record of any incident involving personal data. Where a breach is likely to put your rights at risk we report it to the Information Commissioner's Office within 72 hours and tell you without undue delay, including what happened and what to do.
Your part
Use the secure link we send you for video consultations, keep your email account secure, and tell us straight away if you think a message from us was not genuine. We will never ask for your card details or password by email or text.
Questions
Dr Mohammad Zubair Khan is the data protection lead for Cheshire Clinics and is responsible for how patient information is handled. Email hello@cheshireclinics.com or call 0330 113 1874. Medhub LTD is registered with the Information Commissioner's Office, registration ZB758982.