privacy

Our Privacy Policy

Last Updated: 11/03/2025

1. Important Information and Who We Are

Purpose of This Privacy Notice

This privacy notice explains how Kube Medical Ltd collects, uses, and protects your personal data when you visit our website, interact with us, or use our services. It also informs you about your privacy rights and how the law protects you.

Controller

Kube Medical Ltd is the data controller and is responsible for your personal data.

Company Name: Kube Medical Ltd

Data Protection Officer: Samantha Campbell
Registered Address: Nexus Business Centre, Darby Close, Swindon, SN2 2PN
Email Address: admin@kubemedical.co.uk
Telephone Number: 01793 205 345

Changes to the Privacy Notice and Your Duty to Inform Us of Changes

We may update this privacy notice periodically. The latest version will always be available on our website.

It is important that the personal data we hold about you is accurate and up to date. Please inform us if your personal details change.

2. The Data We Collect About You

We may collect, use, store, and transfer different types of personal data about you, including:

Identity Data – Full name, date of birth, gender.
Contact Data – Email address, telephone number, postal address.
Health Data – Medical history, treatment records, and relevant clinical notes (only when required for your care).
Financial Data – Payment details (if applicable for private treatment).
Technical Data – IP address, browser type, and website usage (collected through cookies and tracking technologies).
Marketing and Communications Data – Your preferences for receiving marketing from us.

We do not collect any special category data beyond health-related information required for providing medical services.

3. How We Collect Your Personal Data

We collect personal data from you in the following ways:

Direct interactions – When you book an appointment, fill out forms, or contact us.
Automated technologies – As you use our website, we may collect technical data via cookies.
Third parties or publicly available sources – We may receive personal data from your insurance provider, referring clinicians, or regulatory bodies when applicable.

4. How We Use Your Personal Data

We will only use your personal data where legally permitted, including:

Purpose/Activity	Type of Data	Lawful Basis for Processing
To register you as a patient	Identity, Contact, Health	Performance of a contract
To provide healthcare services	Identity, Contact, Health	Performance of a contract, Legal obligation
To process payments	Identity, Financial	Performance of a contract
To manage patient records	Identity, Contact, Health	Legal obligation
To improve our website and services	Technical	Legitimate interest
To send you marketing communications (if opted in)	Identity, Contact, Marketing	Consent

5. Disclosures of Your Personal Data

We may share your personal data with the following third parties:

Healthcare providers – To ensure continuity of care.
Insurance companies – If using private medical insurance.
Regulatory bodies – Where required by law.
IT and service providers – Who help operate our website and electronic records securely.

We require all third parties to respect the security and confidentiality of your personal data.

6. International Data Transfers

We do not transfer your personal data outside the UK or EEA. If we ever do, we will ensure appropriate safeguards are in place.

7. Data Security

We have implemented security measures to protect your personal data from unauthorised access, loss, or misuse. Access to your data is restricted to authorised staff and third parties who need it for legitimate purposes.

8. Data Retention – How Long We Keep Your Data

We will only retain your personal data for as long as necessary. This includes:

Medical records – Retained for at least 8 years after your last appointment (or until age 25 for children) in line with UK healthcare regulations.
Marketing data – Retained until you withdraw consent.
Payment records – Retained for financial auditing purposes.

9. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

✅ Right to Access – Request a copy of your data.
✅ Right to Rectification – Request corrections to inaccurate data.
✅ Right to Erasure – Request deletion of data (where applicable).
✅ Right to Restrict Processing – Request limits on how we use your data.
✅ Right to Object – Object to processing under legitimate interest.
✅ Right to Data Portability – Request transfer of your data.
✅ Right to Withdraw Consent – Withdraw marketing or other consent-based data processing.