Privacy Policy – SABA Health Clinic

Last updated: 08/10/2026
At SABA Health Clinic, we take your privacy seriously. This policy explains how we handle your personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

SABA Health Clinic is a private medical clinic based in Bishop’s Stortford, Hertfordshire, provided and run by Saba Health & Care PVT Limited (CQC provider ID 1-24594057894, location ID 1-26549206972). Saba Health & Care PVT Limited is the “data controller” of the personal information you provide to us.

Contact details:
📍 Chapel House, Thremhall Park, Bishop’s Stortford, Hertfordshire
📞 01279 874388
📧 contact@sabahealth.co.uk

2. Information We Collect

We may collect and store the following types of information:

  • Contact details: name, address, phone number, email address
  • Health records: symptoms, medical history, test results, treatment plans
  • Payment details: billing and transaction information
  • Website data: IP address, device type, browser, cookies (see Cookie Policy)

3. Why We Collect Your Data

We process your personal and medical data in order to:

  • Provide you with safe and effective healthcare services
  • Arrange and manage appointments
  • Prescribe medication and issue test referrals
  • Process payments and maintain clinic accounts
  • Meet legal, professional, and regulatory requirements
  • Improve our website and patient services

We will only process your data where we have a lawful basis under UK GDPR (such as your consent, the provision of healthcare, or compliance with a legal obligation).

4. Sharing Your Information

We do not sell your data. We may share it with:

  • Doctors and healthcare professionals directly involved in your care
  • Accredited laboratories and diagnostic providers (when tests are ordered)
  • Regulators such as the Care Quality Commission (CQC) or the General Medical Council (GMC), if required
  • Insurers, only where you have asked us to share information
  • Secure third-party service providers (such as IT systems and payment processors) under strict confidentiality agreements

5. How We Protect Your Data

  • Records are stored securely using encrypted systems.
  • Only authorised staff and clinicians have access.
  • We maintain strong cyber security measures in line with NHS Digital and ICO guidance

6. How Long We Keep Your Data

  • Medical records: kept for the minimum retention period required under NHS and Department of Health guidance (typically up to 10 years after last treatment, or longer fr children/medicolegal cases).
  • Non-medical data (enquiries, payments): kept only as long as necessary for the purpose collected.1

7. Your Rights Under UK GDPR

You have the right to:

  • Access the data we hold about you
  • Request corrections to inaccurate information
  • Request erasure of data (subject to medical record-keeping requirements)
  • Restrict or object to processing in certain circumstances
  • Request your records in electronic format (data portability)

To exercise these rights, contact us at contact@sabahealth.co.uk. You may also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

8. Cookies & Tracking

Our website uses cookies to function properly and to improve user experience. For details, see our Cookie Policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.

Contact Us

If you have questions about cookies or data use, contact us at:

📧 contact@sabahealth.co.uk

📞 01279 874388

📍 Chapel House, Thremhall Park, Bishop’s Stortford, Hertfordshire