Privacy notice
How Medhub LTD, trading as Cheshire Clinics, collects, uses, shares and protects your personal and health information, and the rights you have over it.
Draft for review by Medhub LTD before publication. This notice explains how we use personal and health information; it is written to meet UK GDPR and the Data Protection Act 2018.
Who we are
Medhub LTD, trading as Cheshire Clinics, is the data controller for the personal information we hold about you. We are registered with the Information Commissioner's Office under registration number ZB758982. Company number 14487050; registered office 6A Ollershaw Lane, Marston, Northwich CW9 6ES. Dr Mohammad Zubair Khan is our data protection lead. Contact us about your data at hello@cheshireclinics.com or on 0330 113 1874.
The information we collect
• Identity and contact details: name, date of birth, address, email, telephone number and photo identification shown at the start of a consultation.
• Health information: the reason for your consultation, medical history, medications, allergies, consultation notes, prescriptions, letters and test results.
• Payment information: card payments are processed by our booking platform's payment provider; we do not store full card numbers.
• Technical information: IP address, browser and device type, pages visited and cookies, as described in our Cookie Policy.
• Communications: emails, messages, call recordings where you are told a call is recorded, and feedback or complaints.
Why we use it and our lawful basis
• To provide your consultation and any prescription, letter, referral or test arising from it. Lawful basis: performance of a contract, and for health information, the provision of health care (Article 9(2)(h)).
• To keep a clinical record, which we are legally and professionally required to do. Lawful basis: legal obligation and provision of health care.
• To verify your identity and safeguard patients. Lawful basis: legitimate interests and legal obligation.
• To take payment, issue receipts and manage membership. Lawful basis: performance of a contract.
• To respond to enquiries and complaints. Lawful basis: legitimate interests and legal obligation.
• To send service messages about your booking. Lawful basis: performance of a contract. Marketing emails are sent only with your consent and you can unsubscribe at any time.
Who we share it with
• Your chosen pharmacy, through SignatureRx, to dispense a prescription.
• Randox Health for blood tests and Vista Health for imaging, where you have asked us to arrange a test.
• Our booking and clinical record platform, Semble, which processes data on our behalf under a written contract.
• Your NHS GP, only with your consent, except where safeguarding or an emergency requires disclosure without it.
• Professional interpreters, bound by confidentiality, where you have asked for one.
• Regulators, the courts and law enforcement where we are legally required to do so.
We may view your NHS Summary Care Record during a consultation only with your consent.
How long we keep it
Clinical records are retained in line with the NHS Records Management Code of Practice: adult records for at least eight years after your last contact, and children's records until the 25th birthday, or the 26th if the child was 17 at the end of treatment. Financial records are kept for six years. Marketing consent is kept until you withdraw it.
Where it is stored
Your information is stored on secure, encrypted UK or EEA-based systems. Where a supplier stores data outside the UK we ensure appropriate safeguards, such as the UK International Data Transfer Agreement, are in place.
Your rights
• To be told how your information is used (this notice).
• To access a copy of your information, usually within one month and free of charge.
• To have inaccurate information corrected.
• To ask us to delete information, where we are not required to keep it.
• To object to, or ask us to restrict, certain processing.
• To withdraw consent at any time where processing is based on consent.
• To complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
See our Cookie Policy for the cookies used on this website and how to manage them.
Changes to this notice
We review this notice at least annually and whenever our processing changes. The date at the top shows when it was last updated.