Privacy Notice & Cookie Policy

GGO Med is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Notice explains how we collect, use, and protect your data when you use our website and services.

1. Data Controller

The data controller responsible for your personal information is:

2. Information We Collect

2.1 Personal Information You Provide

When you use our services, we may collect:

• • Name and contact details (email, phone number, address)
• • Medical information relevant to your consultation or treatment
• • Appointment booking details and communication preferences
• • Payment and billing information (processed securely by our payment providers)

2.2 Information Collected Automatically

When you visit our website, we may collect:

• • Browser type, device information, and operating system
• • IP address and general location information
• • Pages visited, time spent on pages, and navigation patterns
• • Referring website or source

3. How We Use Your Information

We use your personal information for the following purposes:

• • Healthcare Services: To provide medical consultations, treatments, and follow-up care
• • Communication: To respond to your inquiries and provide appointment reminders
• • Administration: To manage bookings, billing, and medical records
• • Legal Compliance: To comply with medical regulations and legal obligations
• • Website Improvement: To improve our website functionality and user experience

4. Legal Basis for Processing

Under the UK GDPR, we process your data based on the following legal grounds:

• • Consent: You have given explicit consent for specific purposes
• • Contract: Processing is necessary to fulfill our contract with you
• • Legal Obligation: We are required by law to process your data
• • Legitimate Interests: Processing is necessary for our legitimate business interests

5. Cookie Policy

Our website uses cookies to enhance your browsing experience and understand how visitors use our site.

5.1 What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and improve functionality.

5.2 Types of Cookies We Use

5.3 Managing Cookies

You can manage your cookie preferences at any time through our cookie consent banner. You can also configure your browser to refuse cookies, though this may affect website functionality.

6. Data Sharing and Disclosure

We may share your information with:

• • Healthcare Providers: Other medical professionals involved in your care (with your consent)
• • Service Providers: Third-party services that support our operations (e.g., appointment booking, payment processing)
• • Legal Authorities: When required by law or to protect vital interests

We do not sell or rent your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. This includes:

• • Secure encrypted connections (HTTPS)
• • Access controls and authentication
• • Regular security assessments
• • Staff training on data protection

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Medical records are retained in accordance with NHS and GMC guidelines (typically a minimum of 8 years for adults, or until the patient's 25th birthday for pediatric records).

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• • Right to Access: Request a copy of your personal data
• • Right to Rectification: Request correction of inaccurate data
• • Right to Erasure: Request deletion of your data (subject to legal requirements)
• • Right to Restriction: Request limitation of processing
• • Right to Data Portability: Receive your data in a structured format
• • Right to Object: Object to processing based on legitimate interests
• • Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at mrollandinisecretary@ggomed.co.uk

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. For pediatric patients, parental or guardian consent is required for processing personal information.

12. Changes to This Policy

We may update this Privacy Notice from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Contact Us and Complaints

If you have any questions or concerns about this Privacy Notice or our data practices, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):