Chelsea Surgical Partners | Privacy Policy

PRIVACY POLICY

At Chelsea Surgical Partners (CSP), your privacy is a top priority. This Privacy Policy explains how Chelsea Surgical Partners Ltd. collects, uses, stores, and protects your personal data when you interact with us as a website visitor, enquirer, or patient, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Chelsea Surgical Partners Ltd. (Company No. 13711678) is the Data Controller.

1. Scope of this Policy

This policy covers all personal data collected by CSP via our website (chelseasurgical.org), phone, email, referral forms, and our patient management system, Touchpoints.health.

2. Personal Data We Collect

We collect data necessary for providing our services. This includes:

Identity & Contact Data: Name, date of birth, address, email, phone number.
Health Data (Special Category): Medical history, consultation notes, diagnoses, treatment plans. This sensitive data is processed with extra care for healthcare provision.
Financial & Insurance Data: Payment details (processed securely by Elavon; full card numbers are not stored by CSP), billing, insurance policy information.
Communication Data: Records of your interactions with us.
Website Usage Data: IP addresses, browser type, pages visited, timestamps (collected via cookies and other technologies).

3. How We Collect Your Personal Data

We collect data:

Directly from you: When you contact us, book an appointment, or provide information.
From Third Parties: Such as referring GPs, hospitals, private medical insurers, and our secure patient management system, Touchpoints.health.
Automatically: Through website technologies like cookies.

4. How We Use Your Personal Data

We use your data to:

Provide and manage administrative and booking services for your consultations.
Support the provision of medical care by independent consultants, including sharing necessary health information.
Process payments and manage invoices.
Manage your access to the Touchpoints.health patient portal.
Communicate with you regarding your appointments or enquiries.
Comply with legal obligations and prevent fraud.
Improve our website and services, and analyse usage trends.

Our lawful basis for processing health data (special category data) is for the Provision of Health Care: where processing is necessary for preventative or occupational medicine, medical diagnosis, the provision of health care or treatment, or the management of health care systems and services.

5. Who We Share Your Personal Data With

We may share your data with:

Your Consultant and their team (including their PAs).
Touchpoints.health: Our secure patient portal provider (as a Data Processor).
Elavon: Our secure payment gateway.
Private Medical Insurers: For claims processing.
Referring GPs/Healthcare Professionals.
Hospitals/Clinics where your consultant practices.
Professional Advisers (such as legal advisors) and our internal finance team (for accounting and financial management purposes).
Regulatory Bodies/Law Enforcement as required.

All third parties are required to protect your data in accordance with the law and our instructions.

6. Data Security & Retention

We implement appropriate security measures to protect your personal data from unauthorised access, loss, or disclosure. We retain your data only as long as necessary for the purposes collected, including legal and regulatory requirements.

7. Your Data Protection Rights (UK GDPR)

You have rights regarding your personal data, including the right to:

Access your data.
Request rectification of inaccurate or incomplete data.
Request erasure of your data in certain circumstances.
Request restriction of processing in certain circumstances.
Object to our processing of your data in certain circumstances.
Request data portability.
Withdraw consent where applicable.

We will respond to your requests within one month.

8. Contact Us & Complaints

For questions or to exercise your rights, contact us at:

Email: info@chelseasurgical.org
Phone: 020 8185 0815

PRIVACY POLICY

​

Chelsea Surgical Partners Ltd. (Company No. 13711678) is the Data Controller.

​

1. Scope of this Policy

This policy covers all personal data collected by CSP via our website (chelseasurgical.org), phone, email, referral forms, and our patient management system, Touchpoints.health.

​

2. Personal Data We Collect

We collect data necessary for providing our services. This includes:

Identity & Contact Data: Name, date of birth, address, email, phone number.

Health Data (Special Category): Medical history, consultation notes, diagnoses, treatment plans. This sensitive data is processed with extra care for healthcare provision.

Financial & Insurance Data: Payment details (processed securely by Elavon; full card numbers are not stored by CSP), billing, insurance policy information.

Communication Data: Records of your interactions with us.

Website Usage Data: IP addresses, browser type, pages visited, timestamps (collected via cookies and other technologies).

3. How We Collect Your Personal Data

We collect data:

Directly from you: When you contact us, book an appointment, or provide information.

From Third Parties: Such as referring GPs, hospitals, private medical insurers, and our secure patient management system, Touchpoints.health.

Automatically: Through website technologies like cookies.

4. How We Use Your Personal Data

We use your data to:

Provide and manage administrative and booking services for your consultations.

Support the provision of medical care by independent consultants, including sharing necessary health information.

Process payments and manage invoices.

Manage your access to the Touchpoints.health patient portal.

Communicate with you regarding your appointments or enquiries.

Comply with legal obligations and prevent fraud.

Improve our website and services, and analyse usage trends.

Our lawful basis for processing health data (special category data) is for the Provision of Health Care: where processing is necessary for preventative or occupational medicine, medical diagnosis, the provision of health care or treatment, or the management of health care systems and services.

5. Who We Share Your Personal Data With

We may share your data with:

Your Consultant and their team (including their PAs).

Touchpoints.health: Our secure patient portal provider (as a Data Processor).

Elavon: Our secure payment gateway.

Private Medical Insurers: For claims processing.

Referring GPs/Healthcare Professionals.

Hospitals/Clinics where your consultant practices.

Professional Advisers (such as legal advisors) and our internal finance team (for accounting and financial management purposes).

Regulatory Bodies/Law Enforcement as required.

All third parties are required to protect your data in accordance with the law and our instructions.

6. Data Security & Retention

We implement appropriate security measures to protect your personal data from unauthorised access, loss, or disclosure. We retain your data only as long as necessary for the purposes collected, including legal and regulatory requirements.

7. Your Data Protection Rights (UK GDPR)

You have rights regarding your personal data, including the right to:

Access your data.

Request rectification of inaccurate or incomplete data.

Request erasure of your data in certain circumstances.

Request restriction of processing in certain circumstances.

Object to our processing of your data in certain circumstances.

Request data portability.

Withdraw consent where applicable.

We will respond to your requests within one month.

8. Contact Us & Complaints

For questions or to exercise your rights, contact us at:

Email: info@chelseasurgical.org

Phone: 020 8185 0815 ​

Phone: 020 8185 0815