Privacy Policy

Last Updated: January 2026

Dr Chiggs (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website drchiggs.co.uk and when you use our medical services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

1. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register as a patient
• Book an appointment
• Fill out forms on our website
• Contact us via email or telephone
• Subscribe to our newsletter or communications

This information may include:

• Full name and title
• Date of birth
• Contact details (address, telephone number, email address)
• NHS number or private insurance details
• Medical history and health information
• Emergency contact information
• Payment and billing information

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device, including:

• IP address
• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses

2. How We Use Your Information

We use the information we collect for the following purposes:

Primary Healthcare Purposes

• Providing medical care and treatment
• Managing appointments and scheduling
• Maintaining accurate medical records
• Communicating with you about your care
• Prescription management and pharmacy communication
• Referrals to specialists or other healthcare providers

Administrative Purposes

• Processing payments and billing
• Managing insurance claims
• Responding to your enquiries
• Improving our services and website functionality
• Sending appointment reminders and health-related communications

Legal and Regulatory Compliance

• Complying with legal obligations under UK law
• Maintaining records as required by medical regulations
• Protecting patient safety and public health

3. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data under the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal obligation: Processing is necessary for us to comply with the law
• Vital interests: Processing is necessary to protect someone’s life
• Public task: Processing is necessary for us to perform a task in the public interest or for our official functions

4. Data Sharing and Disclosure

We may share your information with the following parties:

Healthcare Providers

• Other doctors, specialists, or consultants involved in your care
• Hospitals and clinics
• Diagnostic laboratories and imaging centres
• Pharmacies for prescription fulfilment

Administrative and Support Services

• NHS services and health authorities
• Private health insurance companies (with your consent)
• Medical secretarial services
• IT support providers who maintain our systems
• Payment processors for billing purposes

Legal Requirements

We may disclose your information when required by law, such as:

• Court orders or legal proceedings
• Regulatory investigations
• Public health emergencies
• Safeguarding concerns (child protection or vulnerable adults)

We will never sell your personal information to third parties.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Secure, encrypted storage of electronic records
• Password-protected systems with role-based access controls
• Regular security audits and updates
• Secure disposal of paper records
• Staff training on data protection and confidentiality
• Encrypted email communications for sensitive information

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but maintain industry-standard safeguards.

6. Data Retention

We retain your personal information in accordance with legal and professional requirements:

• Adult medical records: Minimum of 10 years after the date of last entry or death
• Children’s records: Until the patient’s 25th birthday, or 26th if the young person was 17 at the conclusion of treatment, or 10 years after death
• Financial records: Minimum of 7 years in accordance with HMRC requirements

After the retention period expires, we securely destroy or anonymise your information in accordance with our data retention policy.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right of access: You can request a copy of your personal data (Subject Access Request)
• Right to rectification: You can ask us to correct inaccurate or incomplete data
• Right to erasure: You can request deletion of your data in certain circumstances
• Right to restrict processing: You can ask us to limit how we use your data
• Right to data portability: You can request your data in a portable format
• Right to object: You can object to certain types of processing
• Rights related to automated decision-making: You have rights regarding automated decisions made about you

Please note that some rights may be limited when we have a legal obligation to retain your medical records or when retention is necessary for the establishment, exercise, or defence of legal claims.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device.

Types of Cookies We Use

• Essential cookies: Required for the website to function properly
• Analytics cookies: Help us understand how visitors use our website
• Functional cookies: Remember your preferences and settings

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children’s Privacy

We treat information about children with particular care and in accordance with professional and legal obligations. Parents or legal guardians provide consent for the treatment of children under 16, although we may also seek the child’s consent where appropriate depending on their age and understanding.

11. International Data Transfers

Your personal information is primarily stored and processed within the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place in accordance with UK data protection law.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a revised “Last Updated” date.

13. Contact Information

14. Complaints

If you have concerns about how we handle your personal information, please contact us first so we can attempt to resolve the issue. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):