Effective date 02/03/2026

Last updated 02/03/2026

 

At Plymouth Private Practice, we are committed to protecting the privacy and security of our patients’ personal information. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

Who we are
Plymouth Private Practice is an independent medical service providing private general practice consultations. For the purposes of data protection law, Plymouth Private Practice acts as the Data Controller for the personal information we collect.

 

What information we collect
We may collect and process the following types of personal data:

• Personal identification information (such as name, date of birth, address, telephone number and email address)
• Information provided when you contact us through our website, email or telephone
• Health and medical information relevant to your consultation and treatment
• Appointment and billing information where applicable

 

How we use your information
We use your personal data to:

• Provide medical care and clinical services
• Arrange and manage appointments
• Communicate with you about your care
• Maintain accurate medical records
• Comply with legal and regulatory obligations

Your information is processed on the legal bases of providing healthcare services, fulfilling contractual obligations, and complying with legal obligations.

 

Confidentiality and security
All personal and medical information is treated as strictly confidential. We take appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse.

Your medical records may be stored securely in electronic systems used for patient record management.

 

Sharing your information
We will only share your information where necessary for your care or where we are legally required to do so. This may include:

• Healthcare professionals involved in your treatment
• Diagnostic services or laboratories
• Regulatory or legal authorities where required

We will never sell your personal information to third parties.

 

How long we keep your information
Medical records are retained in accordance with NHS and professional guidance, which generally requires adult medical records to be kept for at least 8 years after the last patient contact.

 

Your rights
Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate information
• Request restriction of processing in certain circumstances
• Lodge a complaint with the UK supervisory authority

 

If you have concerns about how your data is handled, you may contact us directly.

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK regulator for data protection

 

Contact us
If you have any questions about this Data Protection Statement or how your personal information is handled, please contact Plymouth Private Practice via the contact details provided on this website.

 

This statement may be updated periodically to reflect changes in legal requirements or our services.