Privacy Policy
The Staight Practice Ltd 2 Pelham Street, South Kensington, London SW7 2NG Tel: 020 7581 4222 Email: info@thestaightpractice.co.uk
Last updated: March 2025
ICO Registration Number: ZB868397
Who we are
The Staight Practice Ltd is a private general medical practice registered in England and Wales. We are the data controller of all personal information collected and used in connection with your care and your use of our website (www.thestaightpractice.co.uk).
We are registered with the Care Quality Commission.
For any data protection queries, please contact Dr Richard Sykes at the address or email above
The information we collect
We may collect and hold the following information about you:
Name, date of birth, home address, email address and telephone number; next of kin details including name, contact number and relationship to you; your NHS GP details where relevant; your medical history, current medication and allergies; correspondence between you and the practice including letters, emails and clinical notes; payment and billing information; and website enquiry data where you contact us via our website.
Health information is classed as special category data under UK GDPR and is handled with the highest level of care and security.
How we use your information
We use your personal information to provide and manage your medical care; process referrals to specialists, hospitals and other practitioners; send appointment confirmations and practice communications; process payments and issue receipts; maintain accurate and up-to-date medical records; and comply with our legal and regulatory obligations.
We will only process your data where we have a lawful basis to do so. For health data, this is typically the provision of medical care (Article 9(2)(h) UK GDPR). For general contact and administrative data, the lawful basis is typically contract or legitimate interests.
Who we share your information with
Your information is only shared where necessary. This includes other doctors, consultants or practitioners to whom you are referred by your doctor at the Staight Practice; healthcare professionals involved in your direct care; payment processors for billing purposes; and public authorities or law enforcement where we are required to do so by law, for example in cases of public health concern, safeguarding, or by court order.
We will ask for your consent before releasing information for medical reports for insurance, legal or other third-party purposes.
We will not share your information with family members, friends or spouses without your express permission.
How we store your information
Your records are held on Semble, a clinical management system that is fully compliant with UK GDPR and NHS data security requirements. Physical records are kept securely at our practice premises.
Medical records are retained for a minimum of eight years from the date of last treatment, in line with NHS and medical defence guidance. Records relating to children are retained until the patient's 25th birthday, or eight years after last treatment if later. After the applicable retention period, records are securely destroyed.
Email communication
We communicate by email for appointment and administrative purposes. Please note that our emails are not encrypted. If you would prefer not to be contacted by email, please inform the receptionist and we will remove your email address from our system.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you; request correction of any inaccurate or incomplete data; request erasure of your data in certain circumstances; object to or restrict how we process your data; and request a portable copy of your data.
To exercise any of these rights, please write to Dr Richard Sykes at the address or email above. We will respond within one calendar month in accordance with applicable law.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
Website and cookies
Our website may collect basic usage data. For full details of how we use cookies and tracking technologies, please refer to our Cookie Policy.
Changes to this policy
We may update this policy from time to time. The current version will always be available on our website. We recommend reviewing it periodically.