Privacy Policy

London Hill Medical Ltd - Privacy Policy 

 

London Hill Medical takes your privacy seriously. In line with GDPR ruling this statement outlines how we collect your personal data, how it is stored and how it is used. 
  
Information about us 
London Hill Medical Ltd is a registered company no 11867245. The registered address 78 London Hill, Rayleigh, Essex SS6 7HP. We offer room hire to Practitioners and Therapists at 2 Harley Street, London, W1G 9PA, 78 London Hill, 78 London Hill, Rayleigh, Essex SS6 &HP 

  
How we collect your personal data 
We collect personal data through enquiries via contact forms on our websites www.londonhillmedical.com. Personal data is also collected using hard copy forms, phone calls, text messages and emails. 
  
Where we store your personal data 
For the most part information is stored electronically in a secure, password-protected environment, accessible only to staff that need to see it to perform their roles. Some information is held in hard copy form and this is kept in locked storage, which is again accessible only to staff that need to see it to perform their roles. 
  
How we use your personal data 
We keep personal details to assist you with your enquiry and manage our relationship with you if you should sign up to a licence agreement with us. We use your information for these reasons only.  
  
What information we keep 
If you enquire about our services 
In order to deal effectively with your enquiry, we will keep a record of any relevant personal information such as your name, address, contact details, website address, and profession. We will hold personal information securely for no longer than 12 months, unless an enquirer becomes our customer (licensee).  
  
If you are a licensee 
In order to issue a licence to our customers to use our rooms, we require copies of identification, qualifications, professional accreditation and insurance. We will also keep records of any contact by letter, email and text message. We will hold personal information securely for the duration of the customer relationship, and no longer than 12 months after the end of the customer relationship. 
    
Cardholder Information 
We accept credit and debit card payments in person and over the telephone. The transactions are processed using a third-party online ‘virtual terminal’ and cardholder information taken during the transaction is not stored by us in any form. 
  
Credit or debit card payments for bookings can also be made via our secure online booking system, which is hosted by a third party. We have no access to cardholder information entered by our customers using the booking system. The third party providing this function has its own separate privacy policy, which can be viewed at the time a booking is made, or here:  Skedda Booking System
  
Disclosure of personal data 
We will not share any of your personal data with any third parties for any purposes except under the following limited circumstances:  

• We may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.  

If any of your personal data is required by a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely and in accordance with your rights, our obligations, and the third party’s obligations under the law. 
  

• The name and (if applicable) the company name of practitioners may be shared with reception staff in the buildings in which we have rooms. This is so that they can assist practitioners and their clients.  

• Information about practitioners, including contact details, can be found on the directory pages of our websites. This information is provided with practitioners’ consent and used solely for this purpose. 

  
Obtaining Information 
If you want to know what personal data, we have about you, you can ask us for details of that personal data and for a copy of it (where any such personal data is held). This is known as a “subject access request”. 
  
All subject access requests should be made in writing and sent to: 
  
Richard Hughes 

Chief Operating Officer

London Hill Medical 

78 London Hill Medical, Rayleigh Essex SS6 7HP 
  
Or via email to info@londonhillmedical.com 

 
There is not usually a fee applied when a subject access request is made. However, a reasonable fee to cover administrative costs may be applied if your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests). Further fees may then be charged if an individual requests further copies of their data following a request. Those fees will be based on the administrative costs of providing further copies. 
  
Requests should be specific as to the exact information required.  We will respond to your subject access request within 14 working days and, in any case, not more than one month of receiving it. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of progress.