Thyroid Centre – Privacy Policy

Information for patients making appointments at Thyroid Centre

  1. Introduction

    Thyroid Centre is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, and safeguard your information in accordance with UK data protection law, including the UK GDPR and Data Protection Act 2018.

  2. Data Controller

    Minimal Access Radiology Services is the data controller responsible for your personal data.

    Email: info@thyroidcentre.co.uk
    Telephone: 0203 780 5252

  3. What Information We Collect

    We may collect and process the following information:

    • Personal details: name, date of birth
    • Contact details: address, telephone numbers, email
    • Medical information: relevant clinical details required for your care
    • Administrative information: appointment records, correspondence, billing details

  4. How We Use Your Information

    We use your information to:

    • Provide and manage your healthcare
    • Communicate with you regarding appointments and clinical care
    • Liaise with your GP and other healthcare professionals
    • Manage billing and administration

    We may contact you by phone, email, or post. By default, correspondence is sent via secure/encrypted email unless you request otherwise.

  5. Legal Basis for Processing

    We process your data under the following legal bases:

    • Provision of healthcare (Article 9(2)(h) UK GDPR)
    • Legitimate interests (practice administration and communication)
    • Consent, where required (e.g. sharing information with insurers)

  6. Sharing Your Information

    We may share your information with:

    • Your GP and other healthcare professionals involved in your care
    • Medical secretarial services (for administrative support)
    • Insurance providers (with your consent)
    • Debt collection agencies (administrative details only, where necessary)

    We will never share your clinical information without your consent, unless required by law.

  7. Data Security

    We take appropriate measures to protect your data, including:

    • Secure electronic systems
    • Encrypted communication where possible
    • Restricted access to authorised personnel only

  8. How Long We Keep Your Data

    We retain medical records in accordance with UK clinical record retention guidelines (typically at least 8 years, or longer where clinically appropriate).

    If Minimal Access Radiology Services ceases practising, records will be managed in line with regulatory and professional guidance.

  9. Your Rights

    Under UK GDPR, you have the right to:

    • Access your personal data
    • Request correction of inaccurate data
    • Request erasure (where appropriate)
    • Restrict or object to processing
    • Request data portability

    You may also specify your preferred method of communication and withdraw consent at any time.

  10. Complaints

    If you are unhappy with how your data is handled, you may contact the Information Commissioner’s Office (ICO): Website: www.ico.org.uk

  11. Consent

    You may be asked to complete a data processing consent form prior to your first appointment.

  12. Updates to This Policy

    This policy may be updated from time to time. The latest version will always be available on request or via our website.