1. Who We Are
SABA Health Clinic is a private medical clinic based in Bishop’s Stortford, Hertfordshire. We are the “data controller” of the personal information you provide to us.
Contact details:
📍 Chapel House, Thremhall Park, Bishop’s Stortford, Hertfordshire
📞 01279 874388
📧 admin@sabahc.co.uk
2. Information We Collect
We may collect and store the following types of information:
- Contact details: name, address, phone number, email address
- Health records: symptoms, medical history, test results, treatment plans
- Payment details: billing and transaction information
- Website data: IP address, device type, browser, cookies (see Cookie Policy)
3. Why We Collect Your Data
We process your personal and medical data in order to:
- Provide you with safe and effective healthcare services
- Arrange and manage appointments
- Prescribe medication and issue test referrals
- Process payments and maintain clinic accounts
- Meet legal, professional, and regulatory requirements
- Improve our website and patient services
We will only process your data where we have a lawful basis under UK GDPR (such as your consent, the provision of healthcare, or compliance with a legal obligation).
4. Sharing Your Information
We do not sell your data. We may share it with:
- Doctors and healthcare professionals directly involved in your care
- Accredited laboratories and diagnostic providers (when tests are ordered)
- Regulators such as the Care Quality Commission (CQC) or the General Medical Council (GMC), if required
- Insurers, only where you have asked us to share information
- Secure third-party service providers (such as IT systems and payment processors) under strict confidentiality agreements
5. How We Protect Your Data
- Records are stored securely using encrypted systems.
- Only authorised staff and clinicians have access.
- We maintain strong cyber security measures in line with NHS Digital and ICO guidance
6. How Long We Keep Your Data
- Medical records: kept for the minimum retention period required under NHS and Department of Health guidance (typically up to 10 years after last treatment, or longer fr children/medicolegal cases).
- Non-medical data (enquiries, payments): kept only as long as necessary for the purpose collected.1
7. Your Rights Under UK GDPR
You have the right to:
- Access the data we hold about you
- Request corrections to inaccurate information
- Request erasure of data (subject to medical record-keeping requirements)
- Restrict or object to processing in certain circumstances
- Request your records in electronic format (data portability)
To exercise these rights, contact us at admin@sabahealth.co.uk. You may also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.
8. Cookies & Tracking
Our website uses cookies to function properly and to improve user experience. For details, see our Cookie Policy.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “last updated” date.
Contact Us
If you have questions about cookies or data use, contact us at:
📧 admin@sabahealth.co.uk
📞 01279 874388
📍 Chapel House, Thremhall Park, Bishop’s Stortford, Hertfordshire
