
Privacy Policy
​
Introduction
​
Paynes Healthcare ("we," "us," "our") respects your privacy and commits to protecting your personal data in compliance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
Who We Are
Paynes Healthcare is the data controller responsible for your personal data. Our Data Protection Officer can be contacted at contact@payneshealthcare.co.uk.
Information We Collect
We collect personal data necessary to provide our consultancy services, including your name, contact details, professional information, and any data you provide during our engagement.
How We Use Your Information
Your data is used to:
-
Deliver tailored consultancy services.
-
Manage communications and contractual obligations.
-
Comply with legal and regulatory requirements.
Lawful Basis for Processing
We rely on your consent, contractual necessity, legitimate interests, or legal obligation as permitted by UK GDPR and DUAA.
Specific Clauses under Data (Use and Access) Act 2025
-
We adhere to the Act’s provisions facilitating responsible data use and sharing while maintaining data protection standards.
-
We recognise the new lawful basis of “recognised legitimate interests” for processing data in public interest contexts, applying proportionality and accountability principles accordingly.
-
We have established internal complaint handling processes for data protection issues in line with the DUAA, ensuring complaints are addressed promptly before escalation to the ICO.
-
Automated decision-making processes comply with DUAA restrictions, especially regarding special category data such as health information, safeguarding your rights.
-
We commit to transparency in data processing and the publication of any impact assessments as required by the Act.
​
Data Sharing
Your data will only be shared with trusted partners or regulatory bodies when strictly necessary and in line with legal requirements.
Data Security and Retention
We implement robust technical and organisational security measures, retaining data only for as long as necessary for service delivery and legal compliance.
Your Rights
You can request access, correction, restriction, or deletion of your personal data, and may withdraw consent at any time. Complaints can be escalated to the Information Commissioner’s Office after our internal processes.
​
Changes to This Policy
We may update this policy in response to legal or operational changes and will communicate such updates appropriately.
Contact Information
For any questions or data protection concerns, please contact:
Paynes Healthcare
5 South Charlotte Street
Edinburgh
EH2 4AN
​
Email: contact @payneshealthcare.co.uk
​
Phone: 07923 607761