Privacy Policy

1. Who We Are

b2 Wendover Clinic is a private healthcare provider operating in the United Kingdom. We are committed to protecting and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For questions about this policy or how we handle your data, please contact us at reception@b2wendoverclinic.uk.

2. Information We Collect

We may collect and process the following personal information:

• Identity data: name, date of birth, gender
• Contact data: email address, telephone number, postal address
• Health data: medical history, symptoms, treatment records, and clinical notes (special category data)
• Booking data: appointment history, practitioner preferences
• Communication data: messages sent to us via contact forms or email
• Marketing preferences: consent to receive newsletters and promotional communications
• Technical data: IP address, browser type, and usage data collected via cookies

3. How We Use Your Information

We use your personal information to:

• Provide healthcare services and manage your appointments
• Maintain accurate clinical records as required by our professional regulators
• Communicate with you about your care, appointments, and treatment plans
• Send you newsletters and promotional offers where you have given consent
• Comply with our legal and regulatory obligations
• Improve our website and services

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: to fulfil our obligations in providing healthcare services to you
• Legal obligation: to comply with professional and regulatory requirements
• Vital interests: where necessary to protect your health or safety
• Consent: for marketing communications and non-essential cookies
• Legitimate interests: to improve our services and manage our business

For special category health data, we rely on Article 9(2)(h) UK GDPR — processing necessary for the provision of health care or treatment.

5. Data Sharing

We do not sell your personal data. We may share your information with:

• Other healthcare professionals involved in your care (e.g., your GP) with your knowledge
• Our booking system provider (Cliniko) to manage appointments
• Email marketing platforms (Mailchimp) where you have consented to marketing communications
• Regulatory bodies such as the Care Quality Commission where required by law
• Our IT and software service providers who act as data processors on our behalf

6. Data Retention

We retain clinical records for a minimum of 8 years from the date of your last treatment, or until age 25 if you were a child patient, in line with NHS and professional body guidance. Marketing data is retained until you withdraw consent. Website usage data is retained in accordance with our cookie policy.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (subject access request)
• Rectification of inaccurate or incomplete data
• Erasure in certain circumstances ("right to be forgotten")
• Restriction of processing in certain circumstances
• Data portability where processing is based on consent or contract
• Object to processing based on legitimate interests
• Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at reception@b2wendoverclinic.uk.

8. Cookies

Our website uses essential cookies required for the site to function, and analytical cookies to help us understand how visitors use our site. You can manage your cookie preferences through your browser settings. By continuing to use our site, you consent to our use of essential cookies.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All clinical records are stored securely and access is limited to authorised personnel only.

10. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO. Please email us first at reception@b2wendoverclinic.uk.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.