Privacy notice

Who we are

Northwest Health Ltd, 3–4 Dollywaggon Way, Bamber Bridge, Preston PR5 6EW, is the data controller for the information you give us. We are registered with the Information Commissioner's Office and with the Care Quality Commission (provider ID 1-24247734964).

What we collect

• Your name, date of birth, address, phone number and email
• The clinical information you give the GP before your scan
• Your scan referral, images and radiologist's report
• Payment details, processed by our payment provider — we do not store card numbers

Why we use it

To provide healthcare to you. Under UK GDPR our lawful bases are Article 6(1)(b) — performing our contract with you — and Article 9(2)(h) — the provision of health care by a health professional bound by a duty of confidentiality.

Who we share it with

• The imaging centre carrying out your scan, and the consultant radiologist reporting it
• Your NHS GP, where a finding needs urgent action or you ask us to send it
• Our practice management system (Pabau), which stores your record securely in the UK/EU
• Regulators or authorities where the law requires it

We never sell your data or use it for advertising.

How long we keep it

Adult medical records are kept for at least eight years after your last contact, in line with NHS retention guidance. Imaging records may be kept longer by the centre that holds them.

Your rights

You can ask for a copy of your record, ask us to correct it, object to certain uses, or withdraw a consent you have given. Write to info@northwest-health.co.uk. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

This page is a working draft prepared September 2026. Have it checked by your solicitor and your DPO before the site goes live.