Privacy Policy
Introduction
This Privacy Policy explains how Dr.Dropin UK Limited collects and uses personal data, why it is processed, the legal basis for that processing, and the rights available to you under applicable data-protection law.
Contact information
Questions about privacy or requests relating to your personal data can be sent to Dr.Dropin UK Limited at hello@drdropin.uk or by post to 498–504 Fulham Road, London SW6 5NH.
How we collect and use your information
Dr.Dropin collects and uses patient information to provide private healthcare services and to maintain appropriate clinical records. Information is handled in accordance with applicable legislation and professional healthcare guidance, including UK GDPR, the Data Protection Act 2018, confidentiality obligations and relevant health and social-care law.
Clinical records may include contact details, next-of-kin information, appointment and communication records, clinical notes, treatment details, test and investigation results, and relevant information received from other healthcare professionals or carers.
When information may be disclosed
Personal information is kept confidential. It may be disclosed where required by law, where you have consented, where disclosure is necessary for your care, or where there is a justified public-interest reason. Information used for audit or statistical purposes should be handled so that patients are not identified where appropriate.
Data sharing and care
Dr.Dropin may share relevant information with other healthcare providers where this is necessary to support your care and where the appropriate legal basis or consent applies. If a proposed data-sharing arrangement materially changes how information is used, Dr.Dropin will provide appropriate information about that change and any available choices.
Data retention
Personal data is retained only for as long as it is needed for the purpose for which it was collected, or for as long as legal, regulatory, clinical or professional requirements require. Medical records may be retained for extended periods where they remain necessary for the provision of healthcare.
Website and cookies
The Dr.Dropin website uses cookies and similar technologies to support functionality, understand website use, improve services, measure marketing performance and, where permitted, support advertising. Cookie choices can be managed through the website’s consent controls and further information should be provided in the applicable cookie notice.
Marketing and social media
Dr.Dropin may send service information, newsletters or marketing communications where permitted and according to your preferences. You can opt out of marketing communications. If you contact Dr.Dropin through social-media services, information you submit there may be processed in order to respond to you. Sensitive health information should be sent through appropriate direct channels rather than public social-media posts.
Confidentiality and security
Dr.Dropin applies administrative and technical safeguards designed to protect personal information. Access is limited to authorised personnel who need the information for their role. Staff and relevant contractors are expected to comply with confidentiality obligations and receive appropriate training.
Information will not normally be disclosed to third parties without permission unless disclosure is required by law, necessary in exceptional circumstances, or otherwise permitted under applicable data-protection rules.
Sharing information with third parties
Where necessary to deliver healthcare and supporting services, information may be shared with appropriate organisations such as healthcare professionals, NHS or specialist providers, pharmacies, IT and billing providers, social-care services, local authorities, emergency services or other contracted data processors. Dr.Dropin states that it does not sell patient data for marketing purposes.
Your rights
Depending on the circumstances, you may have rights to access your personal data, request correction, object to or restrict certain processing, and request deletion where the law allows. To exercise a right or ask how your information is being handled, contact hello@drdropin.uk. Some clinical or legal records cannot be deleted immediately where retention is required by law.
Access to personal information
You can request access to personal information held about you. Where applicable, Dr.Dropin will explain what information is held, why it is held, who it may be disclosed to, and provide a copy in an intelligible form, subject to legal limitations.
Keeping your details accurate
You should tell the person treating you or contact Dr.Dropin if important details such as your name, address or date of birth are incorrect or change, so that records can be kept accurate and up to date.
Regulatory registration and data controller
Dr.Dropin states that it is registered with the Information Commissioner’s Office as required. Dr.Dropin UK Limited is responsible for the secure and confidential handling of personal data, with the Medical Director identified by Dr.Dropin as responsible for data-control oversight.
Data processors and international transfers
Dr.Dropin uses service providers that process personal data on its behalf, for example providers of booking or patient-record systems. Appropriate contractual confidentiality and data-processing obligations are required. Where personal data is transferred outside the United Kingdom, Dr.Dropin states that appropriate safeguards will be used in accordance with applicable data-protection law.
Updates to this Privacy Policy
Dr.Dropin may revise this Privacy Policy when processing activities or legal requirements change. Updated versions will be published on the website.
Authoritative policy
This page is based on Dr.Dropin’s current published privacy information. For the latest authoritative wording, refer to Dr.Dropin’s official Privacy Policy at https://www.drdropin.uk/about-us/privacy-policy.