At Horizon Medical we take your privacy very seriously. It is our policy to respect your privacy regarding any information we may collect from you, whether you use this website or are a patient at our clinic at 3 Peterborough Road, King's Lynn, Norfolk, PE30 5FQ.
We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and, where the law needs it, your consent. We also tell you why we are collecting it and how we will use it.
We are the data controller for the information described here. If you have any questions about how we handle your information, contact us at hello@horizonmedical.health, on 01553 223275, or at the clinic address above.
What we collect
When you contact us or book an appointment, we collect your name, date of birth, address, phone number and email address. If you use the contact form on this website, we collect your name, email address and message so that we can reply.
When we treat you, we keep a medical record. It holds your medical history, symptoms, test results, images, diagnoses, treatment plans, letters and notes from your appointments. It can also include details of your GP and any other clinician involved in your care.
If you pay us yourself, we keep a record of invoices and payments. Card payments are handled by our payment provider and we do not store your full card number. If your insurer pays, we keep your policy number and authorisation details.
When you use this website, our server logs basic technical information such as your IP address, browser type and the pages you visit. We use this to keep the site secure and working.
Why we use it, and our legal basis
UK data protection law requires us to have a lawful reason for each use of your information. Health information is "special category" data, so it needs an extra condition as well.
To give you medical care, we rely on legitimate interests and on the condition for the provision of health care (UK GDPR Article 9(2)(h)).
To manage bookings, payments and insurance claims, we rely on our contract with you.
To keep medical records for the required time and to meet our duties to regulators, we rely on legal obligation.
To answer enquiries and keep the website secure, we rely on legitimate interests.
To send you marketing, such as news about new services, we rely on your consent. You can withdraw it at any time.
Who we share it with
We do not share your personally identifying information publicly, and we do not sell it. We share it with others only when your care, our contract with you or the law needs it. This can include:
your GP, so your NHS record stays complete, unless you ask us not to and it is safe to agree;
other clinicians, hospitals or laboratories involved in your care, including an NHS referral if you need one;
your insurer, if they are paying for your treatment;
companies that provide services to us, such as our clinical records system, IT support, email and payment processing. They act on our instructions and must keep your data secure;
regulators, the courts or the police, when the law requires it.
Transfers outside the UK
We keep your data in the UK where we can. If a supplier stores data outside the UK, we make sure suitable safeguards are in place, such as UK adequacy regulations or approved contract clauses.
How long we keep it
We only keep information for as long as we need it to give you the service you asked for, and for as long as the law or professional guidance says we must.
We keep adult medical records for at least 8 years after your last treatment. Records for children are kept until their 25th birthday, or their 26th if they were 17 when treatment ended. Some records, such as those for certain cosmetic procedures, are kept longer to meet professional guidance. We keep financial records for 6 years. We delete general enquiries that do not lead to treatment once we no longer need them.
How we protect it
We protect the information we store with appropriate technical and organisational measures. These help prevent loss and theft, and unauthorised access, disclosure, copying, use or change. Only staff who need your records can see them. We use access controls and secure systems, and our staff are bound by medical confidentiality.
Our website
This website uses only the cookies it needs to work. We do not use advertising or analytics cookies. The site loads its fonts from Adobe Fonts, so your browser connects to Adobe's servers when a page loads.
Our website links to external sites that we do not run. We have no control over the content and practices of these sites, and we cannot accept responsibility or liability for their privacy policies.
Your rights
You have the right to:
get a copy of the information we hold about you;
ask us to correct information that is wrong;
ask us to delete information, or limit how we use it. We may not be able to delete medical records we must keep by law;
object to how we use your information;
ask us to transfer information to another provider;
withdraw consent at any time, where we rely on consent.
You are also free to refuse our request for your personal information. If you do, we may be unable to give you some of the services you want, and we may not be able to treat you safely.
To use any of your rights, email or write to us. We will reply within one month. There is normally no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
We will update this page when our practices change. Please read this policy before you use our website or book an appointment. If you have any questions, feel free to contact us.
This policy is effective as of 13 October 2026.