Home / Privacy Policy

Privacy Policy

What is a Privacy Notice?

Under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, you have specific rights in relation to your personal data. This Privacy Notice explains how Nottingham Road Clinic collects, uses, stores, and protects your personal information, and how your rights are respected.

Who We Are

Nottingham Road Clinic 195 Nottingham Road Mansfield NG18 4AA
Telephone: 01623 624137
Email: enquiries@nottinghamroad.co.uk

For the purposes of data protection law, Nottingham Road Clinic is the Data Controller.

The Personal Data We Process

We collect and process personal data necessary to provide healthcare services and to manage our relationship with you as a patient. This may include:

  • Name
  • Address
  • Telephone numbers
  • Email address
  • Date of birth
  • NHS number (where applicable)
  • GP surgery details
  • Health and clinical information relevant to your care
  • Appointment and correspondence records

Lawful Basis for Processing

We process your personal data under the following lawful bases:

  • Performance of a contract, to provide healthcare services you have requested
  • Legal obligation, to meet healthcare, regulatory, and record keeping requirements
  • Provision of health or social care, where processing of special category data is necessary for medical diagnosis, treatment, and management
  • Legitimate interests, where appropriate and where your rights are not overridden

How We Use Your Personal Data

Your personal data is used to:

  • Provide safe and effective clinical care
  • Communicate with you regarding appointments, treatment, and follow-up
  • Maintain accurate clinical and administrative records
  • Meet legal, regulatory, and professional obligations
  • Support clinical governance, audit, and quality improvement

Sharing Your Personal Data

We only share your personal data where necessary and appropriate, including with:

  • Clinicians and healthcare professionals involved in your care
  • Authorised clinic staff supporting administrative and operational functions
  • External providers where required for diagnostics, referrals, or onward care
  • Regulatory or statutory bodies where legally required

We do not sell your personal data and we only share information on a strict need-to-know basis.

Retention of Your Personal Data

Nottingham Road Clinic retains patient records in line with NHS Records Management Code of Practice and applicable legal requirements.

In most cases, patient records are retained for a minimum of 7 years following the last episode of care. Some records may be retained longer where required by law or clinical guidance.

How We Protect Your Data

We take data security seriously and use appropriate technical and organisational measures to protect your personal data, including:

  • Secure electronic systems
  • Restricted staff access
  • Confidentiality agreements
  • Regular review of data protection practices

Your Rights

Under UK GDPR, you have the following rights:

  • The right to access your personal data
  • The right to rectification of inaccurate or incomplete data
  • The right to erasure, in certain circumstances
  • The right to restrict processing, in certain circumstances
  • The right to data portability, where applicable
  • The right to object to processing, in certain circumstances

Accessing or Correcting Your Information

  1. You may request a copy of your personal data at any time by contacting us in writing or by email. Please include your name, address, contact details, and details of the information you are requesting.
  2. If you believe the information we hold about you is inaccurate or incomplete, please contact us and we will correct it without undue delay.

Complaints and Further Information

If you have concerns about how your data is handled, please contact Nottingham Road Clinic in the first instance using the details above.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
www.ico.org.uk

Review Date

This Privacy Notice was last reviewed and updated in 2025 and will be reviewed regularly to ensure continued compliance with data protection legislation.