MedHealth Ultrasound Ltd — Privacy & Cookie Policy
Last updated: 27 July 2026
PART 1 — PRIVACY POLICY
1. Who we are
MedHealth Ultrasound Ltd ("MedHealth", "we", "us", "our") is a private diagnostic ultrasound provider operating clinics in Portsmouth and Southampton, England.
Company: MedHealth Ultrasound Ltd
Company number: 16783001 (registered in England and Wales)
Registered address: 112 Milton Road, Portsmouth, England, PO3 6AR
Contact email: contact@medhealthultrasound.co.uk
Contact phone: 023 8168 4646
ICO registration number: ZC033317
Data protection contact: Andrea Drackett — same contact details as above unless a dedicated Data Protection Officer is appointed
We are the data controller for the personal data described in this policy. This policy explains what we collect, why, how we use it, who we share it with, and the rights you have.
2. What personal data we collect
- Contact details: name, email address, phone number, and postal address, provided when you enquire, book, or contact us.
- Booking details: appointment date/time, clinic location, scan type requested, and any information you give our booking platform (Cliniko) at the time of booking.
- Health information (special category data): reason for your scan, relevant symptoms and medical history you share with us, and the clinical findings and report produced from your appointment.
- Payment information: where applicable, processed directly by our payment provider — we do not store full card details ourselves.
- Technical and usage data: IP address, browser and device type, pages visited and how you interact with our website, collected via cookies and similar technologies (see Part 2).
We do not combine your website browsing behaviour (for example, which symptom or condition page you looked at) with your identity for advertising purposes. See Section 7.
3. How we collect your data
- Directly from you — when you book an appointment, complete a contact form, call or email us, or attend a clinic appointment.
- From our booking platform (Cliniko), which processes bookings on our behalf.
- Automatically, through cookies and analytics tools when you browse our website — see Part 2 for full detail.
4. Why we use your data, and our legal basis
- Booking and providing your ultrasound appointment — contact, booking and health data — Art. 6(1)(b) contract; Art. 9(2)(h) health/social care provision by a regulated professional
- Producing and sharing your clinical report — health data — Art. 9(2)(h) health/social care provision
- Contacting you about your appointment (reminders, changes) — contact and booking data — Art. 6(1)(b) contract
- Regulatory record-keeping (CQC, HCPC requirements) — booking and health data — Art. 6(1)(c) legal obligation
- Improving our website and services — technical/usage data (aggregated) — Art. 6(1)(f) legitimate interests
- Marketing communications and remarketing — contact and technical data (never health data) — Art. 6(1)(a) consent
5. How we communicate with you
We may contact you by email, phone, or text message for the following purposes:
- Appointment confirmations, reminders, and changes — sent via Cliniko, necessary to deliver your booking (no opt-out available while you have an active booking).
- Sharing your clinical report or following up on your results.
- Marketing communications — such as news about our clinics or services — only where you've opted in. Every marketing message includes a way to unsubscribe, and you can also opt out at any time by emailing contact@medhealthultrasound.co.uk or calling 023 8168 4646.
We will never use your health information to personalise marketing messages.
6. Who we share your data with
- Cliniko — our booking and practice management software provider, acting as a data processor under contract.
- Your GP or another clinician you nominate — only where you ask us to share your report, or with your consent.
- Wix.com — our website hosting provider.
- Google (Analytics, Ads) — receives cookie-based technical/browsing data only, and only where you've given cookie consent (Part 2). Google never receives your health information from us.
- Meta Platforms Ireland Limited (Facebook/Instagram) — where you've given advertising cookie consent, Meta's Pixel receives cookie-based technical/browsing data for ad measurement. Where we use Meta's Conversions API, we may also send Meta a hashed (non-readable) version of contact details such as your email or phone number, solely to match ad conversions — never your health information, symptoms, or the reason for your visit.
- Regulators — the Care Quality Commission (CQC) and Health and Care Professions Council (HCPC), where legally required.
We do not sell your personal data to any third party.
7. A specific commitment on health data and advertising
We do not use the fact that you visited a page about a particular condition or symptom (for example, a page about pelvic pain or a testicular lump) to target advertising at you, build a remarketing audience, or infer anything about your health for marketing purposes. This applies across every advertising platform we use, including Google Ads and Meta (Facebook/Instagram) — any advertising cookies or pixels are based on general website visits, not on inferred medical conditions, and any hashed contact details shared with Meta for ad matching never include health information.
8. International transfers
Some of our service providers (including Google and Meta) may process data on servers outside the UK. Where this happens, we rely on legally recognised safeguards such as the UK's International Data Transfer Addendum or an adequacy decision. Your clinical data is held by Cliniko and processed in accordance with their data processing terms.
9. How long we keep your data
- Clinical records: retained for 8 years from the date of your last appointment, in line with our records management policy, after which they are securely deleted or anonymised.
- Booking and contact data: retained for as long as needed to manage our relationship with you, plus a reasonable period afterwards for legal and accounting purposes.
- Marketing consent and cookie data: see the retention table in Part 2.
10. How to withdraw your consent, or change or delete your information
Where we rely on your consent (for example, marketing communications or non-essential cookies), you can withdraw it at any time — this won't affect anything we did before you withdrew it. To withdraw consent, change your details, or ask us to delete information we hold about you:
- Marketing consent: unsubscribe via the link in any marketing email, or contact us directly.
- Cookie consent: use the cookie preferences control on our website, or clear cookies in your browser (Part 2, Section 4).
- Your personal or booking details: email contact@medhealthultrasound.co.uk or call 023 8168 4646 and we'll update or remove them, subject to what we're required to keep for clinical or legal reasons (Section 9).
Note that we can't delete clinical records we're legally or professionally required to retain, even if you withdraw consent to marketing — see Section 9 for retention periods.
11. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Ask us to erase your data, where applicable
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent (this won't affect processing carried out before you withdrew it)
To exercise any of these rights, contact us at contact@medhealthultrasound.co.uk or 023 8168 4646. If you're not satisfied with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Keeping your data secure
We use appropriate technical and organisational measures to protect your data, including secure booking and record-keeping systems, restricted staff access to clinical information, and contractual data protection obligations on our suppliers. No system is 100% secure, but we review our safeguards on an ongoing basis.
13. Children
Our services are intended for adult patients.
14. Changes to this policy
We may update this policy from time to time, for example to reflect changes in our services or the law. The "Last updated" date at the top shows when it was last revised.
PART 2 — COOKIE POLICY
1. What are cookies
Cookies are small text files placed on your device when you visit our website. They help the site function, let us understand how it's used, and — where you consent — support advertising. This policy is issued alongside our Privacy Policy and reflects the UK's Privacy and Electronic Communications Regulations (PECR) as well as UK GDPR.
2. Categories of cookies we use
- Strictly necessary — required for the website to function (e.g. page navigation, remembering your cookie preferences). These don't require consent and can't be switched off.
- Analytics — help us understand how visitors use the site (e.g. Google Analytics 4), so we can improve it. Loaded only after you consent.
- Advertising — support Google Ads and Meta (Facebook/Instagram) campaign measurement and remarketing (general site visits only, never based on health content viewed). Loaded only after you consent.
3. Cookies in use
- Wix session cookies (various) — Wix.com — core site functionality, security — Strictly necessary — Session to 2 years
- _ga, _ga_* — Google Analytics (GA4) — distinguishes visitors for analytics reporting — Analytics — up to 2 years
- _gid — Google Analytics — distinguishes visitors (short-term) — Analytics — 24 hours
- gcl_au, IDE — Google Ads / Google Marketing Platform — ad campaign measurement and remarketing — Advertising — up to 90 days (gcl_au), up to 13 months (IDE)
- _fbp, _fbc — Meta Pixel (Facebook/Instagram) — ad campaign measurement and remarketing — Advertising — up to 90 days
- Consent preference cookie — MedHealth (via consent banner) — remembers your cookie choices — Strictly necessary — 12 months
In addition to the Meta Pixel cookies above, we use Meta's Conversions API — a server-side connection, not a cookie — to share limited, hashed conversion data (such as a hashed email or phone number) with Meta for ad measurement, only where you've given advertising consent. This never includes your health information.
4. Managing your consent
When you first visit our site, a cookie banner lets you accept or decline analytics and advertising cookies; strictly necessary cookies always load. You can change your choice at any time via the ["Cookie Preferences" link in the site footer / cookie icon] or by clearing cookies in your browser. This site uses Google Consent Mode v2, meaning Google's tags automatically adjust their behaviour based on your consent choice rather than firing by default.
5. Third-party cookies
Some cookies are set by third parties (Google, Meta) when you interact with embedded content or measurement tools on our site. We don't control these cookies directly — see Google's and Meta's own privacy policies for how they process this data.
Our site is built on Wix. Wix's own platform cookies, and cookies placed by any third-party app or service connected through Wix (such as our booking widget), operate under those providers' own privacy and cookie policies — Wix's platform privacy policy does not cover them, and neither does this one beyond what's listed in the table above. You can see the full list of cookies Wix itself places at support.wix.com/en/article/cookies-and-your-wix-site.
6. Browser controls
Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may affect how the site works; blocking analytics or advertising cookies won't affect core site functionality.
7. Questions
Contact us at contact@medhealthultrasound.co.uk or 023 8168 4646 with any questions about this Privacy & Cookie Policy.