Privacy Notice
For Emedix Health Ltd
Who We Are
Emedix Health Ltd operates as a private GP clinic providing face-to-face medical consultations. We are committed to protecting your personal data and handling it transparently in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
What Information Do We Collect?
We may collect the following types of personal data:
-
Personal Details: Name, address, date of birth, contact details (phone number and email).
-
Health Data: Medical history, symptoms, test results, prescriptions, and treatment plans.
-
Financial Information: Payment details for consultations or services provided.
-
Other: Feedback or complaints you provide to us.
Why Do We Collect Your Data?
We process your personal data for the following purposes:
-
To provide you with healthcare services, including consultations, diagnostics, and treatment.
-
To manage your appointments and communications.
-
To comply with legal and regulatory obligations (e.g., reporting notifiable diseases).
-
To process payments for services.
-
To improve our services based on patient feedback.
Our Lawful Bases for Processing Data
We process your data under the following lawful bases:
-
Consent: When you explicitly agree to share your information for certain purposes.
-
Contract: To deliver healthcare services you have requested.
-
Legal Obligation: To comply with applicable healthcare regulations.
-
Vital Interests: To protect your health and well-being in emergency situations.
How Is Your Data Stored?
We ensure your data is stored securely using the following measures:
-
Electronic Records: Stored on an encrypted, password-protected system (e.g., WriteUpp).
-
Paper Records: Kept in locked cabinets within secure premises (if applicable).
-
Access Controls: Restricted to authorized personnel only.
Who Do We Share Your Data With?
We may share your data with:
-
Other healthcare providers involved in your care (e.g., specialists, diagnostic labs).
-
Pharmacies for processing prescriptions.
-
Regulatory bodies (e.g., Public Health England) when required by law.
We will never sell your personal data or share it with third parties for marketing purposes.
Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
-
Access: Request a copy of your data.
-
Correction: Request corrections to inaccurate data.
-
Erasure: Request deletion of your data where applicable.
-
Restriction: Request limited use of your data in certain circumstances.
-
Data Portability: Request transfer of your data to another provider.
-
Objection: Object to processing based on specific legal grounds.
To exercise your rights, contact us at Office@Emedix.co.uk
How Long Do We Keep Your Data?
We retain your data for as long as necessary to fulfil the purposes outlined in this notice, including legal and regulatory requirements. For example:
-
Medical records are retained for at least 10 years after the last consultation, as required by healthcare regulations.
Contact Information
If you have any questions or concerns about how we handle your data, you can contact us:
-
Email: Office@Emedix.co.uk
Right to Complain
If you are unhappy with how we process your data, you can lodge a complaint with the Information Commissioner’s Office (ICO):
-
Website: www.ico.org.uk
-
Phone: 0303 123 1113
​
Dr. Jaimy Muijs van de Moer
Lead GP, Emedix Health Ltd