Privacy Policy

Kent & Sussex ENT ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains what personal information we collect, how we use it, and the rights you have in relation to it. It applies to information we collect through this website and when you contact us, book an appointment, or are referred to us for care.

Who we are

Kent & Sussex ENT is the data controller responsible for your personal data. You can contact us at:

The person responsible for data protection at the practice is Rebecca Semmens. If you have any questions about this policy or how we handle your data, please contact us using the details above.

The information we collect

We collect and process personal information that you provide to us directly — for example when you complete our contact form, patient self-referral form, or GP referral form, or when you email or telephone us. Depending on the form, this may include:

Special category (health) data

Because we are a medical practice, some of the information you give us is health information, which is treated as a "special category" of personal data under UK data protection law. We apply additional safeguards to this information and only process it where the law allows — principally for the purposes of providing you with health care and treatment.

Children

We provide care to children, and where a form is completed on behalf of a child it will usually be completed by a parent or guardian. We do not knowingly collect information directly from children under the age of 16 without the involvement of a parent or guardian.

Information from other sources

We may also receive information about you from third parties, such as your GP, another clinician who refers you to us, or your medical insurer, in connection with arranging and providing your care.

Why we use your information and our lawful basis

We use your information to respond to your enquiries, arrange and provide your consultations and treatment, communicate with you and your GP, and administer our practice. Our lawful bases for processing are:

We will only send you marketing communications about our services where you have given your express consent, and you can withdraw that consent at any time.

Who we share your information with

We may share your information with the consultants, clinicians and administrative staff involved in your care, and, where relevant, with your GP, the hospitals at which we hold clinics, and your medical insurer. We may also disclose information where we are required to do so by law.

We use a small number of trusted third-party service providers ("data processors") to run this website and handle enquiries. These act only on our instructions and under contract:

International transfers

Some of our service providers, including those named above, are based in the United States. Where your information is transferred outside the UK, we ensure that appropriate safeguards are in place to protect it, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU–US Data Privacy Framework.

Payments

This website does not take payments. Any payment for your consultation or treatment is arranged directly with the practice, the hospital, or your medical insurer, and is handled through their own secure payment processes.

How long we keep your information

Personal data submitted through our website enquiry forms is kept for 12 months from the date the enquiry is closed, unless you go on to become a patient, in which case your clinical records are retained in line with the professional and legal requirements that apply to medical records.

How we keep your information secure

We have put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no transmission of information over the internet or by email can be guaranteed to be completely secure, and any information you send us is at your own risk.

Cookies and analytics

This website does not use tracking or advertising cookies. We use cookieless analytics to understand aggregate visitor numbers and page performance without identifying you or tracking you across other websites. For more detail, please see our Cookie Policy.

Your rights

Under UK data protection law you have the right to: request access to your personal data; ask us to correct inaccurate data; request erasure of your data; restrict or object to our processing; and, where applicable, request the transfer of your data. To exercise any of these rights, please contact us using the details above.

Data breaches

In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will report it to the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, and will notify you where we are required to do so.

Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date.

How to complain

If you have a concern about how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.