Privacy Statement

Last updated: 26th June 2026

This Privacy Statement explains how we collect, use, and protect your personal data when you visit https://harleystreetmd.com. Please read it carefully.

We comply with applicable privacy legislation, which means:

• We clearly state why we collect and process personal data.
• We limit the collection of personal data to what is necessary for legitimate purposes.
• We seek your explicit consent where required.
• We take appropriate security measures to protect your personal data and require the same from third parties who process data on our behalf.
• You have the right to access, correct, or delete your personal data upon request.

If you have any questions, please contact us using the details in Section 11.

‍

Data Controller

Harley Street Medical Doctors Limited is the Data Controller for personal data collected through this website. We are registered with the Information Commissioner's Office (ICO) under registration number ZA178439.

Registered Office: First Floor, 57A Wimpole Street, London, W1G 8YP

‍

1. Cookies

Our website uses cookies. For details, please see our Cookie Policy.

‍

2. Special Category Health Data (UK GDPR Article 9)

As a healthcare provider, we may collect and process special category personal data as defined under Article 9 of the UK General Data Protection Regulation (UK GDPR). This includes data relating to your physical or mental health, medical history, and treatment information.

We process this data on the following lawful bases:

• Explicit consent: where you have given us clear, informed consent to process your health data for a specific purpose.
• Provision of healthcare: where processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, the provision of health or social care, or the management of health systems (Article 9(2)(h) UK GDPR).
• Vital interests: in exceptional circumstances where processing is necessary to protect your vital interests or those of another person.

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent or request deletion of your health data, please contact us using the details in Section 11.

We will never sell, share, or use your health data for marketing purposes. Health data is retained only for as long as is necessary for the purpose for which it was collected, or as required by applicable law or professional regulatory obligations.

‍

3. Disclosure of Personal Data

We may disclose personal data:

• If required by law, court order, or law enforcement.
• When necessary for public safety investigations.
• During a business transfer (sale, merger, or acquisition).

We have a data processing agreement with Google.

• Google may not use your data for other Google services.
• We block the inclusion of full IP addresses.

‍

4. Security

We implement appropriate measures to protect your data against unauthorised access, loss, misuse, or alteration. Access is limited to authorised personnel only, and our security procedures are regularly reviewed.

‍

5. Third-Party Websites

Links on our website may lead to external websites. We are not responsible for how those sites handle your data. Please review their privacy policies before providing any personal information.

‍

6. Changes to this Privacy Statement

We may update this Privacy Statement from time to time. Please check it regularly for updates. When possible, we will inform you directly of significant changes.

‍

7. Your Rights

You have the following rights under data protection law:

• To know why and how your personal data is processed and how long it will be kept.
• To access the personal data we hold about you.
• To correct or delete your personal data at any time.
• To withdraw consent and request deletion if processing is based on consent.
• To transfer your data to another controller.
• To object to processing, unless there are compelling legitimate grounds.

We may request proof of identity to ensure your data is not altered or deleted in error.

‍

8. Complaints

If you are dissatisfied with how we handle your personal data, you may contact the Information Commissioner's Office (ICO):

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

You may also raise a complaint directly with the ICO online at: https://ico.org.uk/make-a-complaint

‍

9. Data Protection Officer

Our Data Protection Officer is Dr Qudsiyah Shah. You can contact her at: admin@harleystreet-md.co.uk

‍

10. Children

We do not knowingly collect personal data from children under the legal age of consent in their country of residence. If you are under this age, please do not provide any personal data.

‍

11. Contact Details

Harley Street Medical Doctors
First Floor, 57A Wimpole Street, London, W1G 8YP
United Kingdom
https://harleystreetmd.com
admin@harleystreet-md.co.uk
020 8127 8840

‍

12. Data Requests

To exercise any of your rights, please contact us using the above details.