This notice explains what personal information Jenhams Clinic collects, why we collect it, who we share it with and what you can do about it. We have tried to keep it clear and short. If anything is unclear, please ask us.
Version 2. Last updated August 2026. Next review August 2027.
Who we are
Jenhams Clinic Ltd is a private healthcare clinic at 45 South Street, Dorking, Surrey. We provide travel and UK vaccinations, ear wax removal, skin tag removal, weight management, health screening, blood tests, diagnostics and imaging, nursing services and private GP consultations. Some services are also provided by video consultation elsewhere in the United Kingdom.
We are the data controller for the information described in this notice.
The information we collect
The information we hold depends on how you use the clinic.
If you are a patient
Your name, date of birth, address, telephone number and email address; your GP practice; your medical history, medication and allergies; details of the care we provide, including consultations, vaccinations, tests and results; your consent to treatment; correspondence with other healthcare professionals; and details of appointments and payments.
If you enquire about weight management
The answers you give in our online eligibility questionnaire, including your height, weight, medical history and current medication. We use this to assess whether our service is suitable and safe for you, whether or not you go on to book an appointment.
If you have a video consultation
The information you give us during the appointment, and any measurements or photographs you provide. We do not record video consultations. Our clinician makes written notes in your record in the same way as an appointment at the clinic.
If you use our website
Anything you send us through an enquiry or booking form, your email address if you subscribe to our newsletter, and information about how you use the site collected through cookies and similar technology.
Why we use it, and our legal basis
We do not use your health information for marketing, and we never sell your information.
Our website
Cookies
Our website uses cookies that are necessary for it to work, and, with your consent, cookies that help us understand how the site is used and measure our advertising. You can accept or reject non essential cookies through the banner when you first visit, and change your mind at any time.
Online booking
Appointments booked through our website are handled by Select and Book, which processes your details on our instructions and under a contract that requires it to keep them secure.
Analytics and advertising
With your consent, we use Google Analytics and Google Ads to understand how people find and use our website. This information helps us improve the site and does not include your health information.
Newsletters
If you subscribe to our newsletter, we hold your name and email address in Mailchimp until you unsubscribe. Every email includes an unsubscribe link.
Who we share your information with
We share your information only where it is necessary, and only with:
- Your GP, where you have agreed or would reasonably expect it, so that your NHS record stays accurate and your care is safe
- Laboratories and imaging providers involved in your care
- Pharmacies dispensing medication we have prescribed. Where medication is delivered to you rather than supplied at the clinic, we currently work with CloudRx and OneScript. We will tell you which pharmacy is being used and ask for your agreement before sharing your details
- Other clinicians we refer you to, with your knowledge
- Companies that provide our clinical records, booking, email, hosting, IT and accounting systems, all under contracts that require them to protect your information and use it only on our instructions
- Your insurer, employer or solicitor, only where you have given us specific written consent
- Regulators such as the Care Quality Commission, and other bodies where the law requires it
We may also share information without your consent where we are required to by law, where a court orders it, where there is a safeguarding concern, or where there is an overriding public interest. We would tell you if this happened unless doing so would create a risk.
Sending information outside the UK
Some of our suppliers are based outside the UK. Where that is the case, we make sure the transfer is covered by approved safeguards, such as the UK International Data Transfer Agreement, so your information keeps the same level of protection.
How long we keep it
We follow the NHS Records Management Code of Practice. In summary, we keep adult health records for eight years after your last appointment, records for children until their 25th birthday, and financial records for six years. Newsletter details are kept until you unsubscribe. When records reach the end of their retention period they are securely destroyed.
How we keep it safe
Your records are held on secure, encrypted systems with individual staff logins and multi factor authentication. Paper records are kept in locked storage. Access is limited to staff who need it for your care, and everyone who works here is trained in confidentiality and data protection.
Your rights
You have the right to:
- Be told how we use your information, which is what this notice does
- Ask for a copy of the information we hold about you
- Ask us to correct anything that is wrong or incomplete
- Ask us to delete information, although we cannot usually delete clinical records we are required to keep
- Ask us to restrict how we use your information, or object to us using it
- Ask us to transfer information you gave us to another provider
- Withdraw your consent to marketing at any time
To make a request, email info@jenhamsclinic.co.uk or write to us at the clinic. We will ask you to confirm your identity, and we will respond within one month. If your request is complex we may need up to two further months, and we will tell you if that is the case.
If you are unhappy
If you are concerned about how we have handled your information, please tell us first. Email info@jenhamsclinic.co.uk or write to us at the clinic. We will acknowledge your complaint within 30 days and respond as quickly as we can.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. The ICO would normally expect you to raise your concern with us first.
Complaints about your care, rather than about your information, are dealt with under the process set out in our Terms and Conditions.
Changes to this notice
We review this notice at least once a year. If we make a significant change we will say so on this page and, where appropriate, tell you directly.
