1. Who We Are
The London Welbeck Hospital ("we", "us", "our") is the data controller responsible for your personal information collected through this platform. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect the following categories of personal data: • Identity data: first name, last name • Contact data: email address, phone number • Account data: login credentials, account preferences • Booking data: appointment details, service selections, booking history • Payment data: billing details and transaction records (we do not store full card numbers) • Technical data: IP address, browser type, device information, cookies • Health-related data: only where directly relevant to your consultation or treatment, collected with your explicit consent
3. How We Use Your Data
We use your personal data to: • Create and manage your account • Process and confirm bookings • Handle payments and issue receipts • Send appointment reminders and updates • Comply with legal and regulatory obligations • Improve our platform and services • Respond to enquiries and provide customer support We will never sell your data to third parties.
4. Legal Basis for Processing
We process your data on the following legal bases: • Contract: to fulfil your booking and provide our services • Legal obligation: to comply with applicable laws and regulations • Legitimate interests: to improve our platform and prevent fraud • Consent: for marketing communications and health-related data (you may withdraw consent at any time)
5. Payment Data
Payments are processed by a PCI-DSS compliant third-party payment provider. We receive only a transaction reference and the last four digits of your card for record-keeping purposes. Full card details are never transmitted to or stored on our servers.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Booking and financial records are retained for seven years in accordance with UK tax and accounting regulations. Health-related data is retained in line with NHS and medical record-keeping guidelines. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.
9. Your Rights
Under UK GDPR, you have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion of your data ("right to be forgotten") • Object to or restrict certain processing • Data portability - receive your data in a structured, machine-readable format • Withdraw consent at any time To exercise any of these rights, contact us at privacy@welbeckhospital.co.uk.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS), access controls, and regular security reviews. In the unlikely event of a data breach affecting your rights, we will notify you and the ICO as required by law.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the platform. Continued use of the platform after changes take effect constitutes your acceptance of the revised policy.
12. Contact & Complaints
For privacy-related queries, contact our Data Protection Officer at: privacy@welbeckhospital.co.uk If you are unsatisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
This document is provided in English. Translations may be offered for convenience, but the English version is the one that governs if anything differs.
Our team is happy to talk anything here through in plain language.
Contact us© 2026 The London Welbeck Hospital. Registered with the ICO.
Back to home