VeinClinic UK

1. Introduction

VeinClinic UK ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website at www.veinclinic.uk, contact us, or use our services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Data Controller: Mr Dynesh Rittoo
Address:Bournemouth
Email: info@veinclinic.uk
Telephone: 07443 840 556

3. What Information We Collect

We may collect and process the following categories of personal data:

• Contact information — your name, email address, telephone number and postal address when you fill in our contact form or book an appointment.
• Medical information — details about your health, symptoms and medical history when you become a patient, provided by you or your referring clinician.
• Enquiry information — the content of any message you send us via the website contact form, email or telephone.
• Technical information — your IP address, browser type, device type and pages visited when you browse our website.
• Payment information — where you pay for treatment as a self-funding patient, we may process payment details through a secure third-party provider.

4. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your enquiry and provide information about our services.
• To arrange and manage consultations, treatment and follow-up appointments.
• To provide medical care and maintain accurate medical records.
• To process payments for self-funded treatment.
• To liaise with your private health insurer where applicable.
• To meet our legal, regulatory and professional obligations.
• To improve our website and services.

5. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your data. We rely on:

• Consent — when you submit an enquiry through our contact form.
• Contract — to provide medical services you have requested.
• Legal obligation — to comply with medical record-keeping and other legal requirements.
• Vital interests — where processing is necessary to protect your health in an emergency.
• Legitimate interests — to improve our services and maintain the security of our website.

Where we process special category data (such as information about your health), we rely on the additional condition that processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, or the provision of health care or treatment.

6. Who We Share Your Information With

We may share your personal data with:

• Other healthcare professionals involved in your care (with your consent).
• Private health insurers, where you are claiming through them.
• Hospitals and clinics where treatment is carried out.
• Our website hosting provider, email service provider and IT support providers, who process data on our behalf under strict contractual terms.
• Regulatory bodies, courts or the police, where required by law.

We do not sell or rent your personal data to any third party.

7. International Transfers

Some of our third-party service providers (such as email or website hosting services) may store data outside the UK. Where this happens, we ensure that appropriate safeguards are in place in line with UK GDPR requirements.

8. How Long We Keep Your Information

• Enquiries from our contact form — kept for 12 months if you do not become a patient, then securely deleted.
• Medical records — retained in line with the recommendations of the General Medical Council and applicable retention guidance for adult medical records (typically a minimum of 8 years after the last entry, or until age 25 for patients treated as a child).
• Financial records — kept for 6 years in line with HMRC requirements.
• Website analytics — typically 14 months.

9. Your Rights

Under UK GDPR, you have the right to:

• Access a copy of the personal data we hold about you.
• Rectify any inaccurate or incomplete information.
• Erase your data in certain circumstances.
• Restrict or object to certain types of processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where consent is the basis for processing.
• Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at info@veinclinic.uk. We will respond within one month.

10. Cookies

Our website uses cookies and similar technologies. Essential cookies are necessary for the site to function. We may also use analytics cookies to understand how visitors use our site. You can control or delete cookies through your browser settings. Please see our Cookie Policy for more information.

11. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include secure hosting, encrypted transmission (HTTPS) and controlled access to patient records.

12. Complaints

If you have concerns about how we handle your personal data, please contact us first at info@veinclinic.uk so we can try to resolve the matter.

You also have the right to complain to the Information Commissioner's Office (ICO):
Website: ico.org.uk
Telephone: 0303 123 1113

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

14. Contact Us

For any questions about this Privacy Policy or how we handle your personal data, please contact:

VeinClinic UK
Email: info@veinclinic.uk
Telephone: 07443 840 556