Privacy Policy for the Practice of Dr Christopher Cook

Last Updated: 23.03.26

This privacy notice explains how we collect, use, and protect your personal and health information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Dr Christopher Cook is the Data Controller for this practice.
ICO Registration Number: ZC102090

2. Information We Collect

We collect information that is necessary to provide you with specialist cardiology care. This includes:

  • Personal Details: Name, date of birth, address, and contact information.

  • Sensitive Health Data: Medical history, symptoms, diagnostic test results (e.g., ECG, Echo), and GP referral letters.

  • Financial Information: Private medical insurance details or billing information for self-funding patients.

3. How We Use Your Data

Your information is used strictly for:

  • Providing medical diagnosis and treatment.

  • Communicating with you regarding appointments and results.

  • Coordinating care with your GP or other healthcare professionals (with your consent).

  • Processing clinical billing and insurance authorisations.

4. Data Sharing

We only share your data with third parties when essential for your care, such as:

  • Your General Practitioner (GP).

  • Hospital facilities where your procedures are performed (e.g., Cleveland Clinic London).

  • Your private medical insurer (e.g., Bupa, AXA).

  • Our secure medical billing and secretarial services.

5. Data Security & Retention

We use encrypted, clinical-grade systems to store your data. In line with UK medical records retention guidelines, we typically hold adult clinical records for 8 years after the conclusion of treatment.

6. Your Rights

Under GDPR, you have the right to:

  • Request a copy of your medical records (Subject Access Request).

  • Rectify any inaccurate information.

  • Withdraw consent for data sharing (noting this may affect your care).

7. Contact Us

If you have any questions about this policy or how your data is handled, please contact our team at clinic@drcookcardiology.co.uk.