PRIVACY POLICY

Last updated: 1 May 2026

GP Private Services is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book an appointment or receive medical services from us.

We process personal data in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and applicable professional, regulatory and medico-legal obligations.

  1. Who We Are

GP Private Services is the trading name of SANA AGGARWAL LTD.

Company registration number:
09087861

Registered in:
England and Wales

Data Controller:
SANA AGGARWAL LTD trading as GP Private Services

Data Protection Lead:
Dr Sumit Aggarwal

Registered office:
60 Abbotsbury Road
Broadstone
Dorset
BH18 9DD
United Kingdom

Clinic address:
GP Private Services
Clarendon Health
111 Longfleet Road
Poole
BH15 2HP
United Kingdom

Email:
admin@gpprivateservices.com

Phone:
01202 026073

Mobile / WhatsApp:
07733 827955

Website:
www.gpprivateservices.com

  1. Information We Collect

We may collect and process the following information.

Information you provide directly may include:

Full name
Date of birth
Address
Email address
Telephone number
GP details
Emergency contact details where relevant
Medical history relevant to assessment or treatment
Medication history
Allergies
Appointment information
Enquiry details submitted by website form, email, WhatsApp, telephone or booking system
Clinical photographs where clinically relevant and with appropriate consent
Payment information, processed securely through third-party providers

Information collected automatically through our website may include:

IP address
Browser type
Device type
Pages visited
Website usage information
Cookies and similar technologies

  1. Children’s Information

Where we provide care to children, personal data may be provided by a parent or guardian.

We handle children’s information with particular care and only process information needed to provide safe and appropriate care, manage appointments, communicate with parents or guardians, and maintain accurate clinical records.

  1. How We Use Your Information

We use your personal information to:

Provide safe and appropriate medical care
Assess suitability for consultations, procedures or treatments
Arrange and manage appointments
Communicate with you about your care
Maintain accurate clinical records
Provide prescriptions, referrals, letters or reports where clinically appropriate
Process payments
Respond to enquiries
Improve our website and services
Meet legal, regulatory, professional and medico-legal obligations
Send service updates, review requests or marketing communications where we have an appropriate lawful basis or consent where required

We only collect information that is necessary to provide healthcare services safely and effectively.

  1. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

Performance of a contract or steps prior to entering into a contract
Legal obligation
Legitimate interests in operating and improving our services
Consent where required, for example for certain optional uses such as clinical photography, marketing or non-essential cookies

Health information is special category data. We process special category health data where necessary for the provision of healthcare, medical diagnosis, treatment and the management of healthcare services.

Where consent is relied upon, you may withdraw consent at any time. Withdrawal of consent will not affect processing that has already taken place lawfully before consent was withdrawn.

  1. Clinical Photographs

Where clinically relevant, photographs may be taken to support assessment, diagnosis, treatment planning, monitoring, referral or clinical record keeping.

Clinical photographs will only be taken, stored or used in accordance with clinical necessity and appropriate consent.

Photographs used for teaching, marketing, website, social media or promotional purposes would require separate explicit consent.

  1. Booking Systems, Clinical Systems and Third-Party Providers

We may use secure third-party booking, clinical record, payment, laboratory, communication and IT systems to manage appointments, records, payments, test requests and patient communications.

These providers may process personal data on our behalf and are expected to comply with applicable data protection legislation and appropriate confidentiality and security requirements.

  1. Communication by Email, Telephone and WhatsApp

We may communicate with you by email, telephone, SMS or WhatsApp where this is necessary to respond to enquiries, manage appointments or support your care.

If you contact us by WhatsApp or email, please avoid sending highly sensitive medical information unless requested. Messages may be stored as part of your enquiry or clinical record where relevant.

We will only send marketing messages, newsletters or review requests where we have an appropriate lawful basis or consent where required. You can opt out of marketing communications at any time.

  1. How We Store Your Data

We take appropriate technical and organisational measures to protect your personal data.

Your data may be stored using:

Electronic medical record systems
Secure booking systems
Secure email systems
Password-protected systems
Encrypted or access-controlled devices
Secure third-party healthcare, laboratory, payment or IT systems where required

Access to personal data is restricted to authorised personnel only.

  1. How Long We Keep Your Data

We retain clinical records in accordance with professional, regulatory and medico-legal guidance.

Typical retention periods may include:

Adult clinical records: normally at least 8 years after the last contact
Children’s clinical records: normally retained until at least the patient’s 25th birthday, or longer where clinically or legally required
Financial records: normally 6 years
General enquiry records: normally up to 12 months unless they become part of the clinical record

Records may be retained for longer where required for legal, regulatory, insurance, safeguarding, clinical or medico-legal reasons.

  1. Sharing Your Information

We may share your information where necessary with:

Healthcare professionals involved in your care
Your NHS GP or other clinician, where appropriate
Laboratories or diagnostic providers
Referral services or specialist providers
Payment providers
Booking system providers
IT and website service providers
Regulatory authorities where required by law
Medical indemnity organisations where necessary
Legal or professional advisers where required

We do not sell or rent your personal data.

All third parties are expected to respect the security of your data and comply with applicable data protection legislation.

  1. International Transfers

Some third-party systems or service providers may store or process data outside the UK.

Where this occurs, we will take steps to ensure appropriate safeguards are in place, such as adequacy arrangements or approved contractual protections where required.

  1. Website Cookies

Our website may use cookies and similar technologies to improve website function, understand website usage and improve user experience.

Cookies may collect information such as:

Website usage statistics
Visitor behaviour
Device information
Browser information

You can manage cookie preferences through your browser settings. Where non-essential cookies are used, appropriate consent controls should be provided.

  1. Data Security

We use appropriate technical and organisational safeguards to protect your personal data.

These include:

Secure systems
Password protection
Access controls
Encryption where appropriate
Restricted access to clinical records
Confidentiality procedures

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure.

  1. Your Rights

Under UK data protection law, you have rights including:

The right to request access to your personal data
The right to request correction of inaccurate data
The right to request deletion of data where appropriate
The right to restrict processing in certain circumstances
The right to object to processing in certain circumstances
The right to data portability where applicable
The right to withdraw consent where processing is based on consent

Some rights are not absolute. For example, clinical records may need to be retained for legal, regulatory, professional, safeguarding or medico-legal reasons.

To exercise your rights, please contact us using the details below.

  1. Complaints

If you are unhappy with how we use your data, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office.

ICO website:
https://ico.org.uk

  1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

We review this Privacy Policy from time to time and will update it where our services, systems or legal obligations change.

  1. Contact Details

Dr Sumit Aggarwal
GP Private Services
Clarendon Health
111 Longfleet Road
Poole
BH15 2HP

Email:
admin@gpprivateservices.com

Phone:
01202 026073

Mobile / WhatsApp:
07733 827955

© 2026 GP Private Services. All rights reserved.

This website is for information only and does not replace a medical consultation. GP Private Services is not an emergency service. If you have an urgent medical concern, please use NHS 111, 999 or your nearest emergency department as appropriate.