Privacy Policy

Oxford Injection Clinic (part of GB Clinic Oxford, "we", "us", "our") is committed to protecting your privacy. This policy explains what personal information we collect when you visit our website or attend our clinic, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Oxford Injection Clinic operates from 14 Elms Parade, Botley, Oxford, OX2 9LG, United Kingdom. We are the data controller for the information described in this policy.

Information we collect

• Contact and booking information — name, email, phone number and the details you submit when booking an appointment or requesting a call back.
• Clinical information — the medical history, symptoms and treatment records needed to provide safe care during your appointment.
• Website usage data — anonymised analytics such as pages viewed, approximate location and device type, used only to improve the website.

How we use your information

• To arrange, deliver and follow up on your care.
• To respond to enquiries submitted through the website or by phone.
• To meet our legal, clinical governance and insurance obligations.
• To improve the safety, security and usefulness of our website.

We do not sell your personal data and we do not share it with third parties for marketing purposes.

Legal basis

We process personal data on the basis of your consent, our legitimate interests in running the clinic, and — for clinical records — the provision of health care under Article 9(2)(h) of the UK GDPR.

How long we keep it

Clinical records are retained in line with NHS and professional guidelines (typically at least 8 years for adults). Website enquiries that do not lead to treatment are deleted within 24 months.

Security

The website is served entirely over encrypted HTTPS. Clinical records are held in access-controlled clinical systems. We regularly review our technical and organisational measures to keep your information safe.

Cookies

We use a small number of cookies for essential site functionality and anonymous analytics. You can accept or decline non-essential cookies via the banner shown on your first visit and change your choice at any time by clearing your browser storage.

Your rights

You have the right to access, correct, delete or restrict the use of your personal data, and to object to processing or request portability. To exercise any of these rights, or to raise a concern, please contact us using the details on our contact page. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Changes to this policy

We may update this policy from time to time. The "last updated" date above will always reflect the current version.