Privacy Policy

GHMS — Global Health Medical Services — is the data controller for personal data you provide. Registered at 68 Kenway Road, Earl's Court, London SW5 0RD.

Contact for data-protection queries: info@ghms.org.uk.

When you book or attend an appointment, we collect: your name, contact details (phone, email), date of birth, reason for visit, medical history relevant to the consultation, payment information, and any clinical notes the treating doctor records during your visit.

Our legal bases under UK GDPR are: the provision of healthcare (Article 9(2)(h)), legitimate interests for service improvement and operational safety (Article 6(1)(f)), and your explicit consent for any optional marketing communications (Article 6(1)(a)).

Medical records are retained in line with the UK NHS Records Management Code of Practice — typically 10 years from your last contact for adults, longer for children. Booking and payment records (non-clinical) are retained for 7 years for tax and audit purposes.

Your data is not sold and is not shared with third parties for marketing purposes.

We share clinical data only in three scenarios: with laboratories processing your tests; with specialists when you request a referral; and with insurance providers if you ask us to invoice them directly.

Under UK GDPR you have the right to access your personal data, correct it, request deletion, restrict our processing, and receive a portable copy. To exercise any of these rights, email info@ghms.org.uk.

We aim to respond to all data-rights requests within 30 calendar days.

If you believe we've mishandled your data and your concern can't be resolved by contacting us directly, you can complain to the UK Information Commissioner's Office at ico.org.uk.