Privacy Notice
How London Heart & Lung Clinic uses your information
This notice explains how London Heart Clinic Limited, trading as London Heart & Lung Clinic, collects
and uses your personal information, and your rights under UK data protection law (the UK GDPR and
the Data Protection Act 2018).
1.Who we are
- Data controller: London Heart Clinic Limited, 941 Great West Road, Brentford TW8 9DU.
- Registered with the Information Commissioner’s Office (ICO), registration reference ZA241187.
- Questions about your information: admin@londonheartlungclinic.com.
2.The information we collect
We collect your identity and contact details; details of your GP and referring clinician; your insurance
and payment information; the health information you provide and that we generate during your tests
(including questionnaire answers, recordings and images such as echocardiograms); and our
correspondence with you.
If you contact us through our website enquiry form, we also collect the details you provide there — your
name, contact details, whether you are a patient or clinician, and your message — and we use them to
respond to your enquiry.
3.How and why we use it
We use your information to provide and administer your diagnostic care and to report your results to
your referring clinician. Under the UK GDPR, our lawful bases are: performance of our contract with you
(Article 6(1)(b)); compliance with our legal obligations (Article 6(1)(c)); and our legitimate interests in
running the clinic safely and efficiently (Article 6(1)(f)). Because health information is special category
data, we also rely on Article 9(2)(h) — the provision of health care and treatment — and, for marketing,
on your consent (Article 9(2)(a) and Article 6(1)(a))
4.Marketing
With your consent, we may contact you about new products and services we offer. We will only do so
through the channels you have opted into (email, text message, telephone or post), and you can
withdraw your consent at any time by contacting us. We will never sell your information.
5.Who we share your information with
We share your information with your referring clinician and, where appropriate, your GP; your medical
insurer and our billing processor for invoicing; laboratories and clinical partners involved in your tests;
our secure IT, practice management and imaging providers, who act as our processors under contract;
and regulators or authorities where we are legally required to (for example the CQC, or forsafeguarding).
We require all our processors to protect your information and to act only on our instructions.
6. Storing your information and international transfers
We store your information securely. Some of our providers may process data outside the UK; where
they do, we ensure appropriate safeguards (such as UK-approved transfer mechanisms) are in place to
protect it. For information about cookies and similar technologies on our website, please see our Cookie Policy at londonheartlungclinic.com.
7.How long we keep your information
We keep your records in line with national guidance for health records: generally for 8 years after your last appointment for adults; for children, until their 25th birthday; and longer where the law or guidance requires.8.Your rights
You have the right to access your information; to have inaccurate information corrected; to request erasure or restriction of processing (subject to our legal duty to retain health records); to object to certain processing; to data portability; and to withdraw consent for marketing at any time. To exercise any of these rights, please contact admin@londonheartlungclinic.com.9.Automated decision-making
We do not make decisions about you using solely automated processing.
10.Complaints
If you have any concerns about how we handle your information, please contact us first. You also have the right to complain to the ICO (www.ico.org.uk; telephone 0303 123 1113).11.Changes to this notice
We may update this notice from time to time. The current version is dated in the footer below.