Skip to content

Privacy Policy

Privacy Policy for Waterfront Private Hospital Ltd, Edinburgh

Last updated: 5 November 2026

Introduction

Welcome to Waterfront Private Hospital’s privacy policy. We are committed to protecting and respecting your privacy in compliance with the Data Protection Act 2018, UK GDPR, and relevant Scottish private healthcare regulations. Our hospital is registered with the Information Commissioner’s Office (ICO), demonstrating our compliance with UK data protection laws. Our ICO registration number is ZB584300.

Information We Collect

  1. Personal Data: We collect and store personal details such as your name, address, email, phone number, date of birth, and other identifying information essential for providing healthcare services.
  2. Sensitive Personal Data: In accordance with healthcare regulations, we may collect health-related and other sensitive information necessary for your medical care and treatment.
  3. Website Usage Information: With your consent, we collect website usage data through cookies to understand how the site is used and to measure our advertising. See our cookie policy for what is set and how to refuse it. If you have accepted cookies and you send us an enquiry through the website, the list of pages you viewed on our site beforehand (page addresses and times only) is sent with it, to help our team respond and to show us which pages are useful to patients.

Use of Your Information

Your data is used for the following purposes:

  • Medical Services: To diagnose, treat, and manage your health effectively.
  • Communication: To provide updates about your care, hospital services, and any necessary administrative communications.
  • Record Keeping: We maintain secure medical records in compliance with legal requirements.
  • Legal Compliance: To ensure adherence to relevant legal and regulatory standards.
  • Service Improvement: We use anonymised data to improve our healthcare services and systems.

Sharing of Your Information

Your data may be shared as follows:

  • Healthcare Professionals: To ensure proper treatment, your data will be shared with relevant healthcare professionals involved in your care.
  • Third Parties: Your data will only be shared with third parties when consent has been obtained or required by law.
  • Legal Disclosures: We may share your data if mandated by legal obligations.

Advertising and Measurement

We advertise on Google. If you accept cookies when you visit our website, Google Ads and Google Analytics cookies allow us to see that an enquiry, an online booking or a telephone call from one of our pages followed an advert, so we can judge which adverts are worth running. Only the fact that an advert was clicked and that a form was sent, a booking was requested or a call was made is shared with Google; your name, contact details and anything about your health are not. We do not use information about what you read on our site to build advertising audiences. Once a consultation has taken place we may report to Google, in anonymised form and without your identity, that an advert led to a consultation or an operation, so that our advertising budget is spent on what helps patients find us. You can withdraw cookie consent at any time by clearing this site’s cookies in your browser.

Our Free AI Consultation

Our free AI consultation is an automated tool that answers questions about our procedures, prices and recovery. It does not give medical advice and does not make decisions about your care. What you type may include information about your health. It is stored and may be read by our team so that we can check and improve the service, and by sending a message you consent to this, so please do not include anything you would rather not share. It is processed on our behalf by the technology companies that provide the tool.

If you ask us to email you a summary, or to call you, your details and a copy of the conversation go to our enquiries team so that we can do that and follow up your enquiry. We keep these records for as long as we need them to handle enquiries and run the service.

If you have accepted cookies, we also record whether you reached the tool from one of our adverts, so that we can judge which adverts are worth running.

Data Security

We are committed to ensuring the security of your personal data by:

  • Implementing robust security measures, including encryption, password protection, and secure storage.
  • Ensuring our staff is trained in maintaining the confidentiality and security of your data.
  • Utilising secure data transfer and storage methods, including lockable filing cabinets for paper documents and encrypted electronic devices for digital records.

Retention of Medical Records

We retain your medical records for the period required by UK law based on various factors such as the type of record, your age, and the treatments you have received. Records are securely deleted or destroyed when no longer needed for medicolegal purposes or after the specified retention period has passed.

Your Rights

As a patient, you have several rights concerning the personal data we hold about you:

  1. Right to be Informed: You have the right to know what personal data we hold and how we use it.
  2. Right of Access: You may request a copy of the data we hold about you at any time.
  3. Right to Rectification: If you believe our information is inaccurate, you can request a correction.
  4. Right to Erasure: In certain circumstances, you may request the deletion of your personal data.
  5. Right to Restrict Processing: You can ask us to limit the use of your personal data in certain situations.
  6. Right to Data Portability: You may request that your data be transferred electronically to another healthcare provider or organisation.
  7. Right to Object: You can object to processing your data for certain purposes.

We will respond to all rights requests within one month. If you wish to exercise any of these rights, please contact us.

Automated Decisions and Profiling

We do not use your data for automated decision-making or profiling.

Data Breaches

We have protocols in place to manage data breaches. In the event of a data breach that risks your personal rights and freedoms, we will notify you and report the breach to the ICO within the legal timeframe.

Policy Updates

We regularly review and update our privacy policy to ensure compliance with legal standards and changes in our practices.

Contact Us

If you have any questions about how we handle your personal data, please contact:

Hazel Monteith
Hospital Director
Waterfront Private Hospital Ltd
ICO Registration Number: ZB584300