Privacy Policy

Your privacy and data security are our top priorities. This policy explains how we collect, use, and protect your personal information.

Last updated: April 3, 2026

Dr. Basil Noureldin Rheumatology Practice (“we”, “our”, or “us”) is committed to protecting your privacy and ensuring the security of your personal and medical information. This Privacy Policy explains how we collect, use, store, and protect your data in accordance with the UK GDPR, the EU GDPR (as it applies in Ireland), and the Data Protection Acts 2018 of both jurisdictions.

Information We Collect

Personal Information

Medical Information

Technical Information

How We Use Your Information

We use your personal and medical information for the following purposes:

Providing medical care, diagnosis, and treatment
Scheduling and managing appointments
Communicating with you about your care
Coordinating care with your GP and other healthcare providers
Processing insurance claims and billing
Meeting legal and regulatory requirements
Improving our services and patient care
Sending appointment reminders and health information (with your consent)

Legal Basis for Processing

We process your data under the following legal bases:

Consent: You have given clear consent for us to process your personal data for specific purposes
Contract: Processing is necessary for the provision of medical services
Legal obligation: We must comply with healthcare regulations and laws
Vital interests: Processing is necessary to protect your life or that of another person
Legitimate interests: Processing is necessary for our legitimate business interests while respecting your privacy rights

Sharing Your Information

We may share your information with:

Your GP and referring healthcare professionals
Other healthcare providers involved in your care
Laboratories and imaging centers for diagnostic services
Insurance companies for claims processing (with your consent)
Regulatory bodies when legally required (e.g., CQC, GMC)
Legal authorities when required by law

We never share your personal information for marketing purposes without your explicit consent. All third parties are required to keep your information secure and confidential.

Data Security

We implement robust security measures to protect your information:

Encrypted electronic medical records systems
Secure, password-protected networks and devices
Regular security audits and updates
Staff training on data protection and confidentiality
Physical security measures for premises and records
Secure disposal of records when no longer needed

Data Retention

We retain your medical records in accordance with professional guidelines and legal requirements:

Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

Right of access: Request copies of your medical records
Right to rectification: Request correction of inaccurate information
Right to erasure: Request deletion of your data (subject to legal requirements)
Right to restrict processing: Request limitation on how we use your data
Right to data portability: Receive your data in a structured format
Right to object: Object to processing based on legitimate interests
Rights related to automated decision-making: Not be subject to automated decisions

To exercise any of these rights, please contact us using the details below.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Data Protection Officer

Dr. Basil Noureldin Rheumatology Practice

123 Harley Street, London W1G 6AW

Email: privacy@drbasilrheuma.co.uk

Phone: +44 20 7123 4567

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. Visit ico.org.uk for more information.

Have Questions About Our Privacy Policy?

We’re here to help. Contact us if you need clarification on any aspect of our privacy practices.