Privacy Notice

Chequers Health Group Ltd. is a healthcare organisation led by General Practitioners and Consultants, providing services to both the NHS and the private health sector. We deliver speedy diagnosis and high-quality patient care in a community setting, creating greater choice and care closer to home.

 Chequers Health Group Ltd. is the data controller for the purposes of the Data Protection Act 2018 and the UK GDPR. ICO registration details can be found at ico.org.uk. Our registered office is Chequers Health Centre, Rushlake Drive, Bolton, Greater Manchester, BL1 3RL. We are regulated by the Care Quality Commission (CQC).

We may collect the following categories of personal data:

·         Personal contact details, including name, address, telephone number, and email address.

·         Date of birth.

·         Emergency contact details, such as next of kin, carer, or legal representative.

·         Doctor and/or consultant details.

·         Healthcare reports, test results, and details about your treatment.

·         CCTV images captured by the systems installed at our premises.

Most of the personal data we process is provided directly by you. We collect data when you:

·         Enter into a contract with us for the provision of your care.

·         Complete patient forms provided by the organisation.

·         Have a consultation with a healthcare professional, including virtual or telephone consultations.

·         Complete enquiry forms on our website or contact us by email, telephone, or social media.

·         Correspond with us by letter or email. Please note that all incoming and outgoing calls to and from patients are recorded.

·         Attend our premises and are recorded on the CCTV system.

 We also receive personal data indirectly from healthcare professionals, including General Practitioners and referring consultants, and from diagnostic sources such as hospitals or pathology laboratories.

We use the personal data we hold about you to:

·         Ensure we provide the best care and treatment possible.

·         Support audit processes for our registration with the CQC and NHS England.

·         Inform service improvements.

·         Review patient queries and complaints.

·         Support litigation claims where necessary.

·         Support the professional development and training of our clinical and non-clinical workforce.

·         Support research and development.

 If you wish your information not to be used for research, development, or training purposes, you have the right under UK GDPR to opt out. Please contact us at [email protected].

We process your personal data under the following lawful bases established by the UK GDPR:

·         Consent: you can withdraw your consent at any time by contacting [email protected].

·         Contractual obligation: to deliver the care you have requested.

·         Legal obligation: to comply with our legal and regulatory duties.

·         Vital interests: in emergency situations where processing is necessary to protect life.

·         Public task: where processing supports a function in the public interest.

·         Legitimate interests: where processing is in our legitimate interests and does not override your rights.

 Where we process special category data, including health information, we rely on Article 9(2)(h) of the UK GDPR; processing necessary for the provision of health or social care as the additional condition for processing.

We may share your personal data with the following parties for healthcare purposes:

·         Your General Practitioner.

·         NHS providers who are directly involved in your care or treatment.

·         Referring consultants from hospital trusts.

 There may also be occasions where we need to share limited information with non-NHS organisations such as social services. We will not share confidential information without your consent unless we are required to do so by law. Where we are unable to obtain your consent, we will notify you via this notice in accordance with UK GDPR fair processing requirements.

Your information is stored securely within our cloud-based systems, which are hosted in the United Kingdom and are compliant with UK GDPR and NHS Digital requirements. Where we hold paper records, these are stored in secure locked cabinets at our premises. We retain your personal data in line with the NHS Records Management Code of Practice, which specifies retention periods by record type. Once the retention period has passed, we will securely delete your information from our systems. Paper records are destroyed via an accredited secure shredding service.

Under UK GDPR, you have the following rights:

·         Right of access: you can request copies of your personal data.

·         Right to rectification: you can ask us to correct data that is inaccurate or incomplete.

·         Right to erasure: you can ask us to delete your personal data in certain circumstances.

·         Right to restrict processing: you can ask us to limit how we process your data in certain circumstances.

·         Right to object: you can object to our processing of your personal data in certain circumstances.

·         Right to data portability: you can ask us to transfer your data to another organisation or to you in certain circumstances.

 You are not required to pay a charge for exercising your rights. We have one calendar month to respond to a request. Please contact us at [email protected] or in writing to the address below.

When attending a Chequers Health Group Ltd. event, an official photographer may take photographs of attendees. We will notify attendees of how photographs will be used. Photographs may be posted on our website or social media. Any attendee who does not wish to appear in photographs should make themselves known to the photographer.

Chequers Health Group Ltd. does not directly target or actively solicit healthcare services to children. Our services are primarily designed for adult patients. However, as a CQC-registered healthcare provider, we recognise that children may be seen as patients in certain circumstances; for example, where a parent or guardian books a consultation on behalf of a minor and that we may therefore incidentally hold personal data about individuals under the age of 18.

 Where we process personal data relating to a child, we recognise that children merit specific protection. In accordance with the Data (Use and Access) Act 2025, which amends Article 25 of the UK GDPR with effect from 5 February 2026, we acknowledge that children may be less aware of the risks and consequences associated with the processing of their personal data, and of their rights in relation to such processing. We take this into account when determining the appropriate technical and organisational measures applied to the handling of any data that may relate to a child.

 Where a child is the patient, consent for the processing of their personal data will normally be obtained from a parent or legal guardian, in accordance with applicable law and clinical best practice. We do not use children's personal data for marketing, research, or any purpose beyond their direct clinical care, except where a specific lawful basis applies and appropriate safeguards are in place.

 If you are a parent or guardian and wish to exercise data protection rights on behalf of a child, or if you have any concerns about how a child's data is being handled, please contact our Data Protection Officer using any one of the methods as detailed below.

If you have any queries about this notice, wish to submit a Subject Access Request, or wish to raise a complaint about how your personal data has been handled, please contact our Data Protection Officer:

 By post: Data Protection Officer, Chequers Health Group Ltd., Chequers Health Centre, Rushlake Drive, Bolton, BL1 3RL

By email: [email protected]

 Should you be unhappy with our response or how we have used your data, you have the right to make a complaint to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Helpline: +44 0303 123 1113. Website: ico.org.uk.