Privacy Notice
 
 
Effective Date: 16 January 2026
Data Controller: Red Rose Healthcare, 7-9 St Mary's Pl, Bury BL9 0DZ, info@redrosehealthcare.co.uk, 0161 537 9215

Red Rose Healthcare is committed to protecting your personal data and handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Notice explains how we collect, use, store, and protect your personal information when you use our services.
 
 
 
1. The Information We Collect
 
 
We may collect and process the following categories of personal data:
 
 
Personal Information
 
 

• Full name

• Date of birth

• Address

• Telephone number and email address

• Next of kin or emergency contact details

 
 
 
Special Category Data (Health Information)
 
 

• Medical history

• Clinical notes and consultation records

• Test results and diagnostic information

• Treatment plans and prescriptions

 
 
 
Administrative Information
 
 

• Appointment details

• Correspondence with you or other healthcare professionals

• Payment and billing information (where applicable)

 
 
 
 
2. Lawful Basis for Processing
 
 
Under UK GDPR, we rely on the following lawful bases:
 

• Article 6(1)(b) – Contract: Processing necessary to provide medical services to you.

• Article 6(1)(c) – Legal Obligation: Compliance with healthcare, regulatory, and safeguarding obligations.

• Article 6(1)(f) – Legitimate Interests: For administrative and operational purposes.

• Article 9(2)(h) – Provision of Health Care: Processing of special category (health) data for medical diagnosis, treatment, and the management of healthcare systems.

 
 
 
 
3. How We Use Your Information
 
 
We process your information to:
 

• Provide safe and effective medical care

• Maintain accurate clinical records

• Manage appointments and follow-up care

• Communicate with you and, where appropriate, other healthcare professionals

• Process payments and administer our services

• Comply with legal and regulatory requirements

 
 
We will only use your information for the purposes for which it was collected, unless otherwise required by law.
 
 
 
4. Data Sharing
 
 
We may share your information, where necessary, with:
 

• Other healthcare professionals involved in your care

• Laboratories and diagnostic service providers

• Regulatory bodies or insurers (where required)

• Legal authorities if required by law

 
 
We do not sell your personal data to third parties.
 
 
 
5. Data Security
 
 
We implement appropriate technical and organisational measures to safeguard your personal data. Access to your information is restricted to authorised personnel only and stored securely in accordance with UK GDPR standards and healthcare data protection requirements.
 
 
 
6. Data Retention
 
 
We retain medical records in accordance with NHS Records Management Code of Practice and other applicable legal requirements. Retention periods vary depending on the type of record and patient circumstances.
 
 
 
7. Your Rights
 
 
Under UK GDPR, you have the right to:
 

• Request access to your personal data (Subject Access Request)

• Request correction of inaccurate or incomplete data

• Request erasure of data in certain circumstances

• Restrict or object to processing

• Request transfer of your data (data portability)

• Withdraw consent where processing is based on consent

 
 
To exercise any of these rights, please contact us using the details below.
 
 
 
8. Complaints
 
 
If you have concerns about how we handle your data, please contact us in the first instance so we can address the issue.
 
You also have the right to lodge a complaint with the:
 
Information Commissioner’s Office (ICO)
Website: https://www.ico.org.uk
Telephone: 0303 123 1113
 
 
 
9. Contact Us
 
 
If you have any questions about this Privacy Notice or how your personal data is handled, please contact:
 
Red Rose Healthcare, 7-9 St Mary's Pl, Bury BL9 0DZ, info@redrosehealthcare.co.uk, 0161 537 9215