Privacy Policy

1. Introduction

London Ultrasound ("we", "our", "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our ultrasound-scan services.

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

• Full name, date of birth, and contact details (address, phone, email)
• NHS number and GP details
• Medical history relevant to your scan
• Payment and billing information

Medical Information

• Clinical symptoms and reason for scan
• Ultrasound images and diagnostic findings
• Scan reports and clinical recommendations
• Previous medical investigations and treatments

3. How We Use Your Information

We use your personal and medical information to:

• Provide ultrasound-scan services and produce diagnostic reports
• Communicate with you about appointments, results, and follow-up care
• Share reports with your GP or referring clinician (with your consent)
• Process payments and maintain financial records
• Comply with legal and regulatory obligations
• Improve our services and maintain quality standards

4. Legal Basis for Processing

We process your data under the following legal bases:

• Contract: To provide the ultrasound-scan services you have requested
• Consent: For sharing reports with your GP or other healthcare providers
• Legal obligation: To comply with healthcare regulations and safeguarding duties
• Legitimate interests: For quality improvement and service development

5. Data Sharing

We may share your information with:

• Your GP or referring clinician (with your explicit consent)
• Specialist consultants for second opinions or onward referral
• NHS services if urgent medical intervention is required
• Professional indemnity insurers for clinical governance
• Regulatory bodies (CQC, ICO) when legally required

We will never sell your personal data to third parties or use it for marketing purposes without your explicit consent.

6. Data Security

We implement robust security measures to protect your data, including encrypted storage, secure access controls, regular security audits, and staff training on data protection. All medical records are stored on secure, UK-based servers with regular backups.

7. Data Retention

We retain your medical records for a minimum of 8 years from your last appointment, in accordance with NHS and professional body guidelines. Pregnancy scan records are retained for 25 years. Financial records are kept for 7 years for tax purposes.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Correct inaccurate or incomplete data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Request restriction of processing
• Data portability
• Withdraw consent at any time

To exercise these rights, please contact us at [email protected]

9. Cookies

Our website uses essential cookies for functionality and analytics cookies to improve user experience. You can manage cookie preferences through your browser settings. See our Cookie Policy for full details.

10. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with an updated revision date. Significant changes will be communicated directly to patients.

11. Contact Us

For questions about this Privacy Policy or to exercise your data rights, please contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk