Privacy Policy
Effective Date: 8th June 2026
Last Updated: 8th June 2026
Introduction
Montrose London (“Montrose”, “we”, “our” or “us”) is committed to protecting and respecting your privacy.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you interact with Montrose London, whether through our website, by telephone, email, social media, in person, or whilst receiving consultations, treatments or other services.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and all other applicable data protection laws.
By engaging with Montrose London, you acknowledge that your personal information may be processed in accordance with this Privacy Policy.
1. Who We Are
Montrose London is the data controller responsible for the personal information described in this Privacy Policy.
For any privacy-related enquiries, please contact:
Data Protection Lead
19 West Eaton Place
London
SW1X 8LT
+44 20 7112 8298
2. Information We Collect
The personal information we collect depends on the nature of your interaction with us.
Information You Provide
This may include:
- Name and title
- Date of birth
- Postal address
- Email address
- Telephone number
- Emergency contact details
- Medical history
- Health and lifestyle information
- Consultation and treatment preferences
- Correspondence and communications
- Payment and billing information
Clinical Information
Where relevant to the services we provide, we may collect:
- Consultation notes
- Medical assessments
- Treatment records
- Diagnostic information
- Consent documentation
- Clinical photography
- Follow-up information
- Treatment outcomes
Website and Technical Information
When you use our website, we may automatically collect certain information including:
- IP address
- Device information
- Browser type
- Pages visited
- Referral source
- Website usage statistics
- Marketing attribution data
Further information about website technologies can be found in our Cookie Policy.
3. How We Use Personal Information
We use personal information for purposes including:
- Responding to enquiries
- Managing appointments and bookings
- Providing consultations and treatments
- Maintaining accurate clinical records
- Communicating with patients and prospective patients
- Processing payments and invoices
- Improving our services and patient experience
- Managing complaints and feedback
- Complying with legal, professional and regulatory obligations
- Protecting the safety of patients, staff and visitors
- Conducting business administration and operational activities
- Sending marketing communications where permitted
4. Lawful Bases for Processing
Depending on the circumstances, we process personal information on the basis of:
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
- Provision of healthcare services
- Protection of vital interests
- Consent where required
Where health information is processed, we rely upon the additional lawful conditions available under applicable data protection legislation relating to healthcare and medical treatment.
5. Medical Records
Maintaining accurate records is essential to providing safe and effective care.
Medical records may contain information obtained directly from you, healthcare professionals involved in your care, laboratories, diagnostic providers and other authorised medical sources.
Access to clinical information is restricted to authorised personnel who require access for legitimate clinical, operational or regulatory purposes.
All records are maintained in accordance with applicable legal, professional and regulatory requirements.
6. Clinical Photography and Images
As part of consultations, treatment planning, treatment delivery and ongoing patient care, Montrose London may create and store photographic, video or digital image records.
These images may be used for:
- Clinical assessment and diagnosis
- Treatment planning
- Monitoring treatment progress
- Documenting treatment outcomes
- Maintaining accurate medical records
- Internal clinical review and quality assurance
- Legal, regulatory or insurance purposes where required
Clinical photographs and images form part of your confidential medical record and are protected accordingly.
Where Montrose London wishes to use photographs, videos or images for marketing, advertising, educational content, publications, presentations, social media, website content or other promotional purposes, we will obtain your specific consent before doing so.
Providing such consent is entirely voluntary and refusal will not affect the care or treatment you receive.
You may withdraw consent for future promotional use at any time by contacting us in writing. Withdrawal will not affect any use that took place before consent was withdrawn or where retention is required by law.
7. Sharing Information
We do not sell personal information.
We may share information where necessary with:
- Healthcare professionals involved in your care
- Hospitals and treatment facilities
- Laboratories and diagnostic providers
- Professional advisers
- Insurers
- Regulatory bodies
- Legal representatives
- Payment service providers
- Technology and software providers
- Government authorities where required by law
All third parties processing information on our behalf are required to maintain appropriate standards of confidentiality, security and data protection.
8. Marketing Communications
We may contact you regarding services, treatments, clinic news, events, educational content and other information that may be relevant to your interests.
Where required by law, marketing communications will only be sent with your consent.
You may withdraw your consent or unsubscribe from marketing communications at any time by:
- Using the unsubscribe link in an email
- Updating your communication preferences
- Contacting Montrose London directly
Operational and service-related communications may still be sent where necessary.
9. Marketing Platforms and Digital Communications
Montrose London uses a range of specialist systems and digital platforms to support patient care, business operations, communications and marketing activities.
These may include:
- Mailchimp
- HubSpot
- Pabau
- Meta platforms, including Facebook and Instagram
- Google services, including Google Analytics, Google Ads and related tools
- Website analytics, communication and customer relationship management platforms
- Other reputable service providers and technology partners as may reasonably be required from time to time
These systems may process information such as:
- Name
- Contact details
- Appointment enquiries
- Communication preferences
- Website interactions
- Marketing engagement information
- Advertising and campaign performance data
We use these platforms to:
- Manage enquiries and appointments
- Send newsletters and marketing communications
- Improve website performance and user experience
- Measure the effectiveness of communications and advertising
- Manage customer relationships
- Deliver relevant content and information
- Support the operation and development of our services
Where personal information is processed by third-party providers, we take reasonable steps to ensure that appropriate contractual, organisational and technical safeguards are in place.
Some providers may process information outside the United Kingdom. Where this occurs, appropriate safeguards will be implemented to ensure personal information remains protected in accordance with applicable data protection laws.
10. Data Security
Montrose London maintains appropriate technical, organisational and physical safeguards designed to protect personal information against:
- Unauthorised access
- Misuse
- Loss
- Alteration
- Disclosure
- Destruction
Access to personal information is limited to individuals who require it for legitimate business, clinical or regulatory purposes.
Security measures are reviewed and updated regularly to reflect changing risks and best practice.
11. Data Retention
We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected and to satisfy legal, clinical, regulatory and professional obligations.
Retention periods vary according to the nature of the information and applicable requirements.
When information is no longer required, it will be securely deleted, anonymised or destroyed.
12. International Data Transfers
Some service providers used by Montrose London may process information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that appropriate safeguards are in place and that such transfers comply with applicable data protection legislation.
13. Your Rights
Subject to applicable law, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate information
- Request deletion of information in certain circumstances
- Restrict processing
- Object to processing
- Request portability of certain information
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority
We may require proof of identity before responding to requests.
14. Children and Young People
Where services are provided to children or young people, personal information will be handled with the same high standards of confidentiality and security applied to all patient information.
Where required by law, consent will be obtained from a parent, guardian or other individual with legal authority to provide consent.
15. Third-Party Websites
Our website and communications may contain links to external websites and services.
Montrose London is not responsible for the privacy practices, content or security of third-party websites and encourages users to review their privacy policies before providing personal information.
16. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in legislation, regulatory requirements, technology, business operations or the services we provide.
The latest version will always be available on our website and will include the date of the most recent revision.
17. Contact Us
If you have any questions regarding this Privacy Policy or how Montrose London handles personal information, please contact:
Data Protection Lead
19 West Eaton Place
London
SW1X 8LT
+44 20 7112 8298
You also have the right to raise concerns with the Information Commissioner’s Office (ICO), the UK’s independent authority for data protection matters.
