Privacy Policy

Last Updated: Wednesday 9th July 2025

Optimum Road Health Centre is committed to safeguarding your personal data and respecting your privacy in accordance with UK data protection and healthcare confidentiality laws.

1. Introduction

Optimum Road Health Centre is a trading name of 25 Eight Medical Group Limited. At Optimum Health Centre, we are committed to protecting your personal data and ensuring your privacy is respected. We value the trust you place in us when you share your personal information, and we take our responsibility to safeguard it seriously.

We operate in full alignment with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (together referred to as the "Data Protection Laws"). Our data handling practices also reflect the guidance set by recognised professional bodies such as the General Medical Council, Royal Colleges, and the Nursing and Midwifery Council.

This policy applies to all individuals receiving services from Optimum Road Health Centre, whether in person, online, or via digital platforms. By accessing our services or providing your personal data, you acknowledge and accept the practices outlined in this Privacy Policy.

If you have any questions or concerns about how your information is used, please contact us at info@optimumhealthcentre.co.uk.

2. About Us

ICO Registration: ZB630163
Data Protection:
yourprivacy@optimumhealthcentre.co.uk

25 Eight Medical Group Limited,
Unit A2 Optimum Business Park,
Optimum Road, Swadlincote,
England, DE11 0WT
Company registration number: 14484808

"Optimum Road Health Centre is the registered trading name under which 25 Eight Medical Group Limited provides private healthcare services. We are not affiliated with the NHS.

In this policy, references to “we”, “us”, “our” or “25 Eight Medical” include our healthcare professionals and staff involved in delivering your care.

3. What Personal Data We Collect

“Personal data” means any information that can directly or indirectly identify you. We may collect personal data either directly from you or through authorised third parties, such as family members, referring healthcare providers, insurers, or other healthcare institutions.

Depending on how you interact with us and the services you receive, we may collect a variety of personal information, including:

  • Your full name, address, email, and phone number

  • Emergency contact details or next of kin information

  • Correspondence between you and Optimum Health Centre

  • Records of referrals, consultations, or services provided

  • Responses to surveys, feedback forms, or promotional activities

  • Recorded phone calls made to or from Optimum Health Centre

  • Clinical records, test results, and medication information

  • Details of any concerns, complaints, or incidents

  • Payment information (e.g. card or bank details)

We may also receive personal information about you from:

  • Your family members or legal representatives.

  • Your GP or other healthcare professionals involved in your care.

  • NHS services or private providers.

  • Public sources (e.g. directories or social media)

We ensure all data is accurate, up to date, and relevant to the care provided.

4. Children and Young People Under 18

We obtain consent from a parent/legal guardian before collecting data for anyone under 18. Such data is handled with extra care and is only used for healthcare purposes. Sharing of this data is only done with appropriate consent and safeguards.

5. Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address, browser and device details

  • Website usage (pages viewed, time spent, etc.)

  • Clickstream and search data

  • Website performance statistics

6. Legal Basis for Processing Your Data

Under the UK GDPR, we process personal data using the following lawful bases (Article 6):

  • Contract – to provide healthcare services

  • Consent – particularly for sensitive health data or sharing with third parties

  • Legal obligation – to comply with laws or regulatory frameworks.

  • Legitimate interests – to improve our services (ensuring your rights are not overridden)

We may also process special category (sensitive) data under Article 9(2)(h): necessary for health or social care provision.

7. Types of Information We Handle

We typically process the following categories of information:

  • General personal data – such as your name, contact details and date of birth.

  • Special category data – health records, medical history, ethnicity (where relevant), and financial details

8. How We Use Your Information

You may provide personal data when you:

  • Book an appointment or register

  • Use our website or make enquiries

  • Complete medical forms, surveys, or promotions

  • Interact with us via social media

  • Are referred by another healthcare provider

  • Make payments

9. Data Sharing & Compliance

We only share your data with:

  • Medical staff directly involved in your care

  • Insurance providers (with your consent)

  • Diagnostic and external healthcare partners

  • Regulators and auditors, where required

  • Regulatory bodies (e.g., CQC, HCPC) if legally required

  • IT service providers under strict confidentiality agreements

All third parties must demonstrate GDPR compliance and enter into data processing agreements with us.
These agreements ensure your information is:

  • Only used for agreed purposes

  • Processed securely and lawfully

  • Not used for marketing unless you have given explicit consent


We continuously review our data-sharing practices to meet the latest legal, clinical, and ethical standards.

10. Data Retention

We retain your personal data in accordance with applicable healthcare retention schedules, including guidance from the Department of Health and professional healthcare bodies.

Generally, adult health records are retained for a minimum of 10 years from the date of last treatment.

11. Healthcare Professionals Associated with Us

Your data may be accessed by employed or affiliated healthcare professionals. These professionals may act as:

  • Independent data controllers

  • Joint controllers with Optimum Health Centre

They are all required to comply with professional and legal confidentiality rules.

12. Your Rights

Under the UK GDPR, you have the following rights and what they mean:

Access > View the data we hold about you

Correction > Fix any inaccurate or incomplete information

Deletion > Request deletion of your data (in certain situations)

Restriction > Ask us to limit how your data is used

Objection > Object to processing (where we rely on legitimate interests)

Portability > Ask for your data to be transferred to another provider

Withdraw consent > Withdraw consent where that is the basis for processing

To exercise any of these rights, contact us using the details below.

13. Data Security

We use robust security measures, including:

  • Encrypted systems

  • Access controls

  • Secure servers

  • Regular penetration testing and system audits

  • Regular staff training

14. Cookie Policy Detail

We use cookies to enhance your experience on our website. These include:

  • Essential cookies – Required for core functionality.

  • Analytics cookies – Help us understand website traffic and improve services (used only with your consent).

  • Functionality cookies – Enable enhanced features like remembering preferences.

You will be asked to accept or reject non-essential cookies via our cookie banner. You can change your preferences at any time by accessing the banner settings.

For full details, please refer to our Cookie Policy at https://optimumhealthcentre.co.uk/cookie-policy

15. International Data Transfers

We do not routinely transfer your personal data outside the UK. If necessary, we ensure appropriate safeguards (e.g. UK-approved Standard Contractual Clauses) are in place.

16. Data Protection Officer (DPO)

We have appointed a Data Protection Lead responsible for overseeing privacy matters.

You can contact them at: Email: yourprivacy@optimumhealthcentre.co.uk

17. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page and, where appropriate, notified via email or during your visit.

18. Contact Us

If you have any questions or wish to exercise your rights under this Privacy Policy, please contact:

25 Eight Medical Group Limited
Optimum Road Health Centre
Unit B1, Optimum Business Park,
Optimum Road, Swadlincote,
England, DE11 0WT

Email:
manager@optimumhealthcentre.co.uk
Phone:
0800 688 9992

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.