Privacy policy

Canova Medical Limited ("Canova Medical", "we", "us") is committed to protecting your privacy. This policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Canova Medical Limited is the data controller for the personal information described in this policy. Registered in England and Wales, company number 05163384. Registered office: 36A Alderley Road, Wilmslow SK9 1JX. We are registered with the Information Commissioner's Office (ICO), registration number ZB180967. Data protection queries: info@canovamedical.com or 01625 810636.

The information we collect

• Identity and contact details: name, date of birth, address, phone number, email address.
• Health information: medical history, details of your consultations, examinations, photographs taken for clinical purposes, procedures, histology results, prescriptions and aftercare records. Health information is special category data and receives additional protection in law.
• Financial information: payment details and transaction records. Card payments are processed by our payment providers; we do not store full card numbers.
• Enquiry and communication records: enquiry forms submitted on this website, emails, call notes and, where you are notified at the time, call recordings.
• Website data: technical data such as IP address and browser type. See our Cookie Settings page for what this site stores on your device.

Why we use your information, and our lawful bases

• To provide your care (consultations, procedures, histology, aftercare): performance of a contract, and, for health data, the provision of health care under Article 9(2)(h) UK GDPR, processed by or under the responsibility of professionals subject to a duty of confidentiality.
• To respond to a website enquiry and arrange your consultation: steps taken at your request prior to entering a contract, and our legitimate interest in responding to people who contact us.
• To communicate with you about appointments, results and follow-up: performance of a contract and legitimate interests.
• To meet our legal and regulatory obligations, including record-keeping, CQC requirements, safeguarding and responding to complaints: legal obligation.
• To keep patients and staff safe and improve our services through audit and governance: legitimate interests, and Article 9(2)(h) for clinical audit.
• To send you relevant updates by email, only where you have consented or where permitted for existing patients under applicable direct marketing rules: consent or legitimate interests. You can opt out at any time using the link in any email or by contacting us.

Who we share your information with

We share personal information only where necessary and under appropriate safeguards, with: the clinicians involved in your care; accredited histopathology laboratories analysing your tissue samples; your GP or other clinicians, with your consent or where required for your safe care; regulators, insurers and legal advisers where required; and carefully selected service providers (such as secure IT, records and payment systems) acting under contract as our processors. We never sell your personal information, and we never share it with third parties for their own marketing.

How long we keep it

Medical records are retained in line with UK healthcare records retention guidance, typically a minimum of 8 years from the conclusion of treatment for adults, and longer where the law or guidance requires. Website enquiries that do not become patient records are kept only as long as needed to deal with the enquiry and for a reasonable period afterwards.

How we protect it

Your information is stored in secure, access-controlled systems. All staff are trained in confidentiality and data protection, and clinical information is handled only by those who need it for your care or for our legal obligations.

International transfers

Where any service provider processes data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or approved standard contractual clauses.

Your rights

Subject to legal conditions, you have the right to: access a copy of your information; have inaccurate information corrected; request erasure; restrict or object to certain processing; data portability; and withdraw consent where processing is based on consent. To exercise any right, contact info@canovamedical.com. We respond within one month.

Complaints

If you are unhappy with how we handle your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

We may update this policy from time to time. The latest version is always published on this page with its date.