Privacy Policy

This Privacy Policy explains how the Pectus Clinic (“we”, “us”) collects, uses and protects your personal information when you contact us or use this website. We are committed to handling your data lawfully, fairly and transparently, in line with the UK GDPR and the Data Protection Act 2018.

Who we are

The data controller is The Pectus Clinic Limited, led by Mr Ian Hunt, Consultant Thoracic & Chest Wall Surgeon.

Company number: 10868038.

You can contact us about your data at enquiries@pectusclinic.com.

The information we collect

• Enquiry and referral details you provide through our forms or by email — your name, contact details, GP/referrer details and the information you choose to share about your condition.
• Health information — clinical details, photographs, imaging and records relevant to your assessment and treatment. Health data is “special category” data and is given additional protection. Where you provide clinical photographs, imaging or medical records, these are treated as confidential health information and used only for enquiry handling, assessment, treatment planning, care delivery, administration or legal and regulatory obligations.
• Patient portal data — information you provide through our patient portal, Carebit.
• Website usage data — limited technical and analytics information collected through cookies (see our Cookie Policy).

How and why we use your information

We use your information to respond to enquiries, arrange and provide your assessment and treatment, communicate with you and your GP or referrer, process insurance or self-pay arrangements, and meet our legal and regulatory obligations. Our lawful bases are your consent, the performance of our agreement to provide care, our legitimate interests in running the practice, and — for health data — the provision of healthcare under Article 9(2)(h) of the UK GDPR.

Who we share it with

We share information only as needed for your care or where we are legally required to. This may include the hospitals where Mr Hunt operates (such as Spire St Anthony’s), your GP and referring clinicians, imaging and laboratory providers, your medical insurer where relevant, and our patient-portal provider (Carebit). We do not sell your data or use it for marketing without your consent.

How long we keep it

Medical records are retained in line with professional and legal guidance for healthcare records. Enquiry information that does not lead to treatment is kept only as long as necessary and then securely deleted.

Keeping your information secure

We use appropriate technical and organisational measures to protect your information against loss, misuse or unauthorised access.

Your rights

You have the right to access your information; to ask us to correct or, in some circumstances, erase it; to restrict or object to certain processing; and to data portability. To exercise any of these rights, contact us at enquiries@pectusclinic.com.

Complaints

If you have a concern about how we handle your data, please contact us first — we will do our best to address it promptly. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.