Privacy Policy

Last updated: August 2026

The Lonsdale Medical Centre (ODS code E84025) is the data controller for personal information collected via this website.

We are committed to protecting your privacy and maintaining the confidentiality and security of your personal and health information.

This Privacy Policy explains how we collect, use, store and protect personal information provided through this website.

1. Information We Collect

We may collect personal information that you provide to us, including:

  • your name and contact details;
  • information submitted through online forms;
  • information relating to enquiries, appointments or healthcare services;
  • health or medical information that you choose to provide; and
  • limited technical information relating to your use of our website.

We only collect information that is reasonably necessary for providing our services, responding to enquiries, meeting our legal and regulatory obligations, or operating our website securely.

2. Health and Medical Information

Health information is particularly sensitive and is treated as confidential.

We handle personal and health information in accordance with applicable privacy and data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable healthcare confidentiality requirements.

We maintain appropriate administrative, technical and organisational safeguards designed to protect personal and health information against unauthorised access, disclosure, alteration, loss or misuse.

3. How We Use Your Information

We may use your information to:

  • respond to enquiries;
  • provide or arrange healthcare services;
  • communicate with you regarding your care or services you have requested;
  • administer and improve our services;
  • maintain appropriate healthcare and administrative records;
  • protect the security and integrity of our systems; and
  • comply with legal, professional and regulatory obligations.

We will not use confidential health information for unrelated marketing purposes without an appropriate lawful basis or authorisation.

4. Sharing Your Information

We do not sell personal information or health information.

Information may be shared with healthcare professionals, service providers or other organisations where this is necessary to provide our services, where you have authorised us to do so, or where disclosure is permitted or required by law.

Where third-party service providers process personal or health information on our behalf, we require appropriate privacy, confidentiality and security safeguards.

5. Security

We take appropriate technical and organisational measures to protect information transmitted to or processed through our website.

Sensitive and confidential information transmitted through the website is protected using secure encrypted connections, including SSL/TLS encryption.

Access to personal and health information is restricted to authorised persons who require access for legitimate purposes.

6. Data Retention

Personal information submitted via this website is retained only as long as needed to deal with your enquiry, and is not used to create or replace your clinical record. Where information is added to your medical record, it is retained in line with the NHS Records Management Code of Practice for Health and Social Care.

Information that is no longer required will be securely deleted or anonymised where appropriate.

7. Cookies and Website Analytics

Our website may use essential cookies necessary for security and functionality.

Where we use analytics or other non-essential technologies, these will be managed in accordance with applicable privacy and cookie laws. We do not knowingly permit advertising or analytics technologies to access confidential medical information submitted by patients.

Further information about cookies used on this website is available in our Cookie Policy.

8. Your Privacy Rights

Depending on the law applicable to you, you may have rights relating to your personal information, including rights to:

  • request access to information held about you;
  • request correction of inaccurate information;
  • request deletion or restriction of information in certain circumstances;
  • object to certain processing;
  • request transfer of your information where applicable; and
  • withdraw consent where processing is based on consent.

You may also have the right to make a complaint to the relevant data protection authority.

The Information commisioners office, found at https://ico.org.uk

9. International Data Transfers

Where personal information is transferred outside the United Kingdom, we take appropriate measures to ensure that the information receives an adequate level of protection as required by applicable data protection law.

10. Children's Privacy

Where our services involve children or young people, personal and health information will be handled in accordance with applicable healthcare, confidentiality and data protection requirements.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes to our services, technology or legal and regulatory requirements. The latest version will always be published on this website.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information has been handled, please contact us using the contact details provided on this website.