Privacy notice
This notice explains what personal information we collect when you use EZhealth Weight Clinic, why we need it, who we share it with and the choices you have. Because we provide healthcare, much of what you tell us is health information. We treat it with particular care.
Last updated: [date]
1. Who we are
EZhealth Weight Clinic is the data controller for the personal information described in this notice. That means we decide how and why it's used, and we're responsible for looking after it.
- Legal name
- [Registered business name]
- Address
- [Registered address]
- ICO registration
- [ICO number]
- Privacy contact
- [Email address]
2. Information we collect
We only collect what we need to assess you safely and look after you. Depending on how you use our service, this may include:
- Your details: name, date of birth, address, email and phone number.
- Your health: medical history, current medicines, height, weight, relevant test results such as HbA1c, and notes from your consultations and reviews.
- Your GP: the name and address of your GP practice.
- Payments: a record of what you've paid. Card details are handled by [payment provider] and we never see your full card number.
- Messages: anything you send us between appointments.
- Website use: basic technical information collected through cookies. See section 9.
3. How we use it
- To check whether our service is suitable and safe for you.
- To decide on, prescribe and monitor any treatment.
- To arrange appointments, send reminders and reply to your messages.
- To take payment and manage your membership.
- To meet our professional and legal duties, including clinical record keeping.
- To investigate and respond to complaints or safety concerns.
We'll only send you marketing emails if you've said yes, and you can change your mind at any time.
4. Our lawful basis
Data protection law says we must have a valid reason for using your information. Ours are:
6. How long we keep it
Clinical records are kept for [retention period] after your last contact with us, in line with [records management guidance followed]. Other information, such as enquiries that don't lead to an assessment, is kept for [retention period]. When it's no longer needed, we delete it securely.
7. Keeping it secure
Your information is stored in secure, access-controlled systems and only people involved in your care can see it. Video consultations take place on [video platform]. If something ever goes wrong, we'll act quickly and tell you and the ICO where the law requires.
8. Your rights
You have the right to:
To use any of these rights, email [privacy email]. It's free, and we'll respond within one month.
10. Contact and complaints
If you have a question or you're unhappy with how we've handled your information, please contact us first at [privacy email] and we'll do our best to put it right.
We may update this notice from time to time. If we make significant changes, we'll let you know.