Privacy policy

Last updated: August, 2026

Who is responsible for your information

The data controller is Chelmsford Urology Partnership. This means he is responsible for deciding how and why your personal information is used.

• Contact: [email protected] · 01245 234414
• Registered address: 4th Floor Fitzrovia House
  153-157 Cleveland Street
  London
  W1T 6QW
• ICO registration number: ZB593047
• Relationship to Chelmsford Urology Partnership: Mr Swallow practises within Chelmsford Urology Partnership (Partnership Number OC390849).

Information collected through this website

If you complete the appointment request form, we collect your name, telephone number, email address, your payment preference (self-pay or insured), and anything you choose to write in the free-text box.

This website does not use advertising or tracking cookies. See the cookie policy for details of the limited third-party services used.

Website server logs

Like most websites, the hosting platform keeps automatic logs of requests made to the server. These record technical details such as your IP address, the pages requested and the time of the request. They are used only to keep the site running securely and to understand overall usage; no attempt is made to identify individual visitors, except where there is reasonable suspicion of an attempt to gain unauthorised access.

Information collected as a patient

If you go on to become a patient, a clinical record is created and held in line with professional and legal obligations. This may include your medical history, examination findings, test and imaging results, correspondence with your GP or insurer, and notes of your treatment.

Why your information is used, and the legal basis

• To respond to your enquiry and arrange an appointment — on the basis of your consent, which you give by submitting the form and which you can withdraw at any time.
• To provide your medical care — under Article 6(1)(b) (performance of a contract) and Article 9(2)(h) of the UK GDPR, which permits processing of health information for the provision of health care and treatment.
• To meet legal, regulatory and professional obligations — including record-keeping duties and, where applicable, billing and insurance requirements.

Who your information may be shared with

• The private secretary, who arranges appointments on Mr Swallow's behalf
• The hospital where you are seen or treated — The Princess Grace Hospital (HCA Healthcare) or Springfield Hospital (Ramsay Health Care)
• Your GP, where it is appropriate to keep them informed about your care
• Your private medical insurer, if you are using insurance to fund your treatment
• Other clinicians involved in your care, such as radiologists or pathologists

Your information is never sold, rented or leased, and is not used for marketing. It is shared only with your consent, where the law requires it, or with the processors named above who help deliver your care.

Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information held about you
• Ask for inaccurate information to be corrected
• Ask for information to be deleted, in certain circumstances
• Ask for the use of your information to be restricted, or object to it
• Ask for your information to be transferred to another provider
• Withdraw consent at any time, where consent is the basis being relied on

How these rights work for medical records

Some rights are limited where the information forms part of a clinical record. These exemptions exist to protect continuity of care and to meet legal duties, and they are set out in the Data Protection Act 2018:

• Access may be restricted where releasing information would be likely to cause serious harm to you or to another person.
• Erasure does not generally apply to clinical records, which must be retained for a set period.
• Objecting to or restricting processing may be limited where the processing is necessary for your medical diagnosis or care.
• Portability is often limited for health records.

To exercise any right, contact the private secretary using the details above.

Where your information is held

Appointment requests submitted through this website are processed by Netlify, the platform that hosts this site, and may be stored on servers outside the United Kingdom. Where information is transferred outside the UK, appropriate safeguards are in place to protect it. Clinical records are held within the practice's own systems and those of the hospitals where you are treated.

How long your information is kept

Website enquiries that do not lead to an appointment are kept only as long as needed to deal with the enquiry, and are then securely deleted.

Clinical records are retained in line with professional guidance and the relevant retention schedules. For adult health records this is typically eight years after the last episode of treatment, and for records relating to children until the patient's 25th birthday, or longer where the law requires it. When records are no longer required they are securely destroyed.

How your information is kept secure

Technical and organisational measures are in place to protect your information against unauthorised access, alteration, disclosure or destruction.

Please note that ordinary email cannot be guaranteed to be fully secure. If you would prefer not to send information by email, please telephone the private secretary instead.

Complaints about how your information is used

If you are unhappy with how your information has been handled, please raise it with the practice first so it can be put right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk or 0303 123 1113.