Herts Ultrasound Scan Ltd — Trade name: EA Ultrasound Norfolk
Norfolk, United Kingdom
Website: www.eaultrasoundnorfolk.co.uk
Company Number: 17107247
Contact: info@eaultrasoundnorfolk.co.uk
Who we are
Service provider: Herts Ultrasound Scan Ltd, trade name: EA Ultrasound Norfolk (“we”, “us”, “our”).
We are a private ultrasound clinic based in Norfolk, UK. This Privacy Policy explains how we collect, use, store and protect your personal and medical data when you use our services, visit our website, or otherwise interact with us. By using our services, you accept the terms of this policy.
Data controller and contact: Herts Ultrasound Scan Ltd is the data controller. Privacy Officer contact email: info@eaultrasoundnorfolk.co.uk.
1. Information we collect
We collect only the personal and health information necessary to provide safe and effective ultrasound services and to meet regulatory requirements. This may include:
- Identity: name, date of birth, gender
- Contact: postal address, email, telephone number, emergency contact
- Medical & health: relevant medical history, ultrasound images, diagnostic reports, test results, GP/referrer details
- Payment: payment details processed securely by third-party providers
- Technical/website: IP address, browser/device information, cookies and analytics
- Limited special category data where relevant (e.g., ethnicity) with appropriate safeguards
2. How we use your information
We process data to:
- Provide, manage and deliver ultrasound scans and related clinical care
- Communicate about appointments, results and follow-up
- Prepare and share clinical reports with you and authorised healthcare professionals (e.g., your GP or referrer)
- Billing, accounting and administrative purposes
- Comply with legal, regulatory and clinical record-keeping obligations
- Improve our services, clinic operations and website experience
- With your consent, send marketing communications (you may withdraw consent at any time)
Legal bases for processing include performance of a contract, legal obligation, your consent, and our legitimate interests (e.g., service improvement and safe clinic operation).
3. Sharing, transfers and recipients
We will only share your personal data where necessary and under appropriate safeguards, including with:
- Healthcare professionals involved in your care (GPs, consultants, specialists)
- Third-party service providers (payment processors, IT/cloud providers, laboratories) under contractual confidentiality and security obligations
- Regulatory or statutory bodies where required by law
We do not sell your personal data. Some partners (for example, specialist laboratories such as Natera) may be located outside the UK/EEA (e.g., the USA). Where we transfer data internationally, we implement appropriate safeguards (e.g., UK adequacy decisions, Standard Contractual Clauses).
4. Cookies and embedded content
Cookies: We use cookies to improve website functionality and user experience. Examples:
- Optional comment/author cookies (1 year)
- Temporary session cookie to check cookie support (discarded on browser close)
- Login cookies (2 days) and “Remember Me” (2 weeks)
- Screen options cookies (1 year)
- Post-editing cookies (1 day)
Embedded content: Pages may include embedded content (videos, images, etc.) from third parties. These act as if you visited the third-party site and may collect data about you; we are not responsible for their privacy practices.
5. Data security
We implement appropriate technical and organisational measures to protect personal and medical data against unauthorised access, loss, alteration or disclosure. Access to clinical records is restricted to authorised personnel. Third-party processors are required to maintain contractual security and confidentiality controls.
6. Data retention
We retain medical and clinical records in line with UK healthcare guidance and legal requirements (typically a minimum of 8 years for adults; longer where applicable for children or other regulatory reasons). Personal data no longer required for legal, clinical or business purposes will be securely deleted.
7. Your rights
Under UK data protection law you have rights including to:
- Access a copy of your personal data
- Request rectification of inaccurate data
- Request erasure in certain circumstances
- Restrict or object to processing
- Withdraw consent where processing is consent-based
- Request data portability (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO) — ico.org.uk
To exercise your rights, contact info@hertsultrasound.co.uk. We will respond within statutory timeframes (usually one month). We may request information to verify your identity and may refuse manifestly unfounded or excessive requests.
8. Complaints
If you believe we have processed your data unlawfully or mishandled your personal data, please contact us so we can investigate. You also have the right to complain to the ICO (0303 123 1113; ico.org.uk/concerns).
9. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be published on our website with the “Last updated” date above.
Additional information
If you need specific details about how we process particular items of data (for example NIPT or specialist laboratory transfers), copies of safeguards for international transfers, or our Data Protection Impact Assessment summaries, contact info@hertsultrasound.co.uk.