Privacy Policy

MY HEALTH (SCOTLAND) LTD

Website: https://www.myhealthscotland.com
Trading name: MY HEALTH SCOTLAND
Last updated: 01 Nov 2026

1. Introduction

MY HEALTH (SCOTLAND) LTD, trading as MY HEALTH SCOTLAND (“we”, “us” or “our”), is committed to protecting your privacy and ensuring that your personal information is handled safely, securely and in accordance with applicable data protection legislation.

This Privacy Policy explains how we collect, use, store, protect and share personal information when you visit our website, contact us, use our services or otherwise interact with us.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR), and other applicable UK data protection legislation.

Please read this Privacy Policy carefully so that you understand how your information is handled.

2. Who We Are

The organisation responsible for determining how and why your personal information is processed is:

MY HEALTH (SCOTLAND) LTD
Trading as: MY HEALTH SCOTLAND
Website: https://www.myhealthscotland.com
Email: info@myhealthscotland.com
Registered company number:  SC602992
Registered office: 179a Dalrymple Street, Greenock, Renfrewshire, Scotland, PA15 1BX

For data protection purposes, MY HEALTH (SCOTLAND) LTD acts as the Data Controller in relation to personal information processed through our website and services, except where another organisation determines the purposes and means of processing.

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

3. What Personal Information Do We Collect?

Depending on how you interact with us and which services you use, we may collect and process the following categories of personal information:

Personal identification information

  • Full name.

  • Date of birth, where required.

  • Contact details.

  • Email address.

  • Telephone number.

  • Postal address.

Enquiry and communication information

  • Information submitted through contact forms.

  • Emails and other correspondence.

  • Customer service enquiries.

  • Feedback and complaints.

  • Information you voluntarily provide when communicating with us.

Account and service information

  • Account registration details, where applicable.

  • Appointment and booking information.

  • Service preferences.

  • Records of services requested or purchased.

  • Relevant payment and transaction information.

Health and special category information

Where relevant to the services we provide, we may collect health-related information that you voluntarily provide or that is necessary to deliver a requested service.

This may include:

  • Medical history.

  • Information about existing health conditions.

  • Symptoms and health concerns.

  • Health questionnaires.

  • Test results and reports.

  • Information about treatments or previous healthcare.

  • Other health-related information relevant to the services requested.

Health information is classified as special category personal data under UK GDPR and receives additional legal protection. We only process such information where an appropriate legal condition applies.

Technical and website information

When you visit our website, we may automatically collect certain technical information, including:

  • IP address.

  • Browser type and version.

  • Device and operating system information.

  • Pages visited.

  • Date and time of visits.

  • Website usage and interaction information.

  • Cookie and similar tracking technology information.

We only collect information that is relevant and necessary for the purposes described in this policy.

4. How Do We Collect Your Information?

We may collect personal information through several methods, including:

  • When you visit or use our website.

  • When you complete an online contact or enquiry form.

  • When you contact us by email or telephone.

  • When you request information about our services.

  • When you make an appointment or purchase a service.

  • When you voluntarily provide information to us.

  • Through cookies and similar website technologies.

  • From third parties where legally permitted and relevant to the services we provide.

We aim to ensure that personal information collected is accurate, relevant and limited to what is necessary.

5. How and Why Do We Use Your Personal Information?

We may use personal information for the following purposes:

  • To respond to enquiries and requests.

  • To provide and administer our services.

  • To manage customer accounts and appointments.

  • To communicate with customers.

  • To process payments and transactions.

  • To provide relevant information about our services.

  • To maintain business and financial records.

  • To improve our website and customer experience.

  • To maintain website security and prevent fraudulent activity.

  • To comply with legal and regulatory obligations.

  • To establish, exercise or defend legal claims.

Where health information is collected, it will only be used for purposes that are relevant to the service being provided and supported by an appropriate legal basis and special category condition.

We will not use your personal information for purposes that are incompatible with the purposes for which it was originally collected without providing appropriate information and obtaining any additional consent required by law.

6. Our Lawful Bases for Processing Personal Information

Under UK GDPR, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Consent

Where you have freely given your consent for a specific purpose, such as receiving certain marketing communications or participating in an optional activity.

You may withdraw your consent at any time.

Contract

Where processing is necessary to enter into or fulfil a contract with you, or to take steps at your request before entering into a contract.

Legal obligation

Where processing is necessary to comply with a legal or regulatory obligation.

Legitimate interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Vital interests

Where processing is necessary to protect someone’s life or other vital interests in circumstances permitted by law.

We will identify the appropriate lawful basis for each processing activity and provide further information where required.

Special category personal data

Where we process health information or other special category personal data, we must also satisfy an additional condition under Article 9 of UK GDPR.

Depending on the nature and circumstances of the processing, this may include explicit consent or another applicable condition under UK GDPR and the Data Protection Act 2018.

We will only process special category information where the relevant legal requirements have been satisfied.

7. How Do We Protect Health Information?

We recognise that health-related information is particularly sensitive and requires additional care and protection.

Where we collect or process health information, we will:

  • Limit access to authorised individuals who need the information for legitimate purposes.

  • Use appropriate technical and organisational security measures.

  • Only collect health information that is relevant to the services being provided.

  • Restrict the sharing of health information to circumstances where there is a lawful and appropriate reason.

  • Retain health information only for as long as necessary or legally required.

  • Take appropriate steps to protect information against unauthorised access, loss, misuse, alteration or disclosure.

We do not sell personal health information.

8. Who Do We Share Personal Information With?

We do not routinely disclose personal information to unrelated third parties.

However, where necessary and lawful, we may share relevant information with trusted third parties, including:

  • Website hosting and website maintenance providers.

  • IT and technical support providers.

  • Email and communication service providers.

  • Payment processing providers.

  • Appointment and booking platform providers.

  • Cloud storage and data management providers.

  • Professional advisers, including accountants and legal advisers.

  • Regulatory authorities, law enforcement agencies and public bodies where legally required.

  • Other service providers involved in delivering services you have requested.

Where third parties process personal information on our behalf, we require appropriate contractual and data protection safeguards.

We only share the information necessary for the relevant purpose.

We do not sell, rent or trade your personal information to third parties for their own marketing purposes.

9. International Transfers of Personal Information

Some of the third-party providers we use may store or process personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that the transfer complies with applicable UK data protection legislation.

This may include relying on UK adequacy regulations, appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum, or another legally recognised transfer mechanism.

Further information about relevant international transfers and safeguards can be requested by contacting us.

10. How Long Do We Keep Your Personal Information?

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory and reporting requirements.

Retention periods will depend on the type of information and the purpose for which it is processed.

For example, different retention periods may apply to:

  • General enquiries and correspondence.

  • Customer account information.

  • Appointment and service records.

  • Health-related information.

  • Financial and transaction records.

  • Website analytics and technical information.

Where information is no longer required, we will securely delete it or anonymise it, unless we are legally required or otherwise permitted to retain it.

Our retention arrangements are reviewed periodically.

11. How Do We Keep Your Information Secure?

We take appropriate technical and organisational measures to protect personal information against accidental loss, destruction, damage, unauthorised access, alteration or disclosure.

Depending on the nature of the information and the risks involved, these measures may include:

  • Restricted access to personal information.

  • Password protection and access controls.

  • Secure systems and data storage.

  • Encryption where appropriate.

  • Appropriate staff awareness and training.

  • Monitoring and review of security arrangements.

  • Appropriate security requirements for third-party service providers.

Although we take reasonable steps to protect personal information, no method of electronic transmission or storage can be guaranteed to be completely secure.

In the event of a personal data breach, we will take appropriate action in accordance with our legal obligations, including notifying the Information Commissioner’s Office and affected individuals where required.

12. Cookies and Website Tracking

Our website may use cookies and similar technologies to improve functionality, understand website usage and support the services we provide.

Cookies are small text files stored on your device when you visit a website.

They may be used for purposes including:

  • Essential website functionality.

  • Security and fraud prevention.

  • Remembering user preferences.

  • Website performance and analytics.

  • Advertising and marketing, where applicable.

Where required by law, we will obtain your consent before placing non-essential cookies or using similar technologies.

You can manage your cookie preferences through our website’s cookie settings, where available, or through your browser settings.

Please note that disabling certain cookies may affect website functionality.

Further information about the specific cookies used on our website, including their providers and purposes, can be found in our Cookie Policy: https://www.myhealthscotland.com/cookie-policy-uk/.

13. Marketing Communications

We may occasionally contact you with information about our services, news or relevant updates where we are legally permitted to do so.

Where consent is required, we will obtain it before sending marketing communications.

You can withdraw your consent or unsubscribe from marketing communications at any time by:

Please note that withdrawing consent to marketing communications will not prevent us from sending important service-related or administrative communications where necessary.

14. Your Data Protection Rights

Under UK GDPR and applicable data protection legislation, you have a number of rights in relation to your personal information.

These include:

Right of access

You can request a copy of the personal information we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal information.

Right to erasure

You can request the deletion of your personal information in certain circumstances.

Right to restrict processing

You can request that we restrict how we use your personal information in certain circumstances.

Right to data portability

You may request certain personal information in a structured, commonly used and machine-readable format, where the right applies.

Right to object

You can object to certain types of processing, including processing based on legitimate interests and direct marketing.

Right to withdraw consent

Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights relating to automated decision-making

You have rights in relation to certain decisions made solely by automated means, including profiling, where those decisions have legal or similarly significant effects.

These rights are subject to certain legal conditions and exemptions.

15. How to Exercise Your Rights

If you wish to exercise any of your data protection rights, please contact us:

Email: info@myhealthscotland.com

Please provide sufficient information to help us identify you and understand your request.

We may need to verify your identity before responding.

We will respond within the time limits required by applicable data protection legislation. In most cases, this will be within one month of receiving your request.

There is normally no charge for making a request, although charges may apply in certain circumstances permitted by law.

16. Complaints and the Information Commissioner’s Office

If you have concerns about how we collect, use or protect your personal information, we encourage you to contact us in the first instance so that we can investigate and try to resolve the matter.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.

Information Commissioner’s Office

Website: https://ico.org.uk/
Make a complaint: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113

You have the right to complain to the ICO regardless of whether you have contacted us first.

17. Children’s Privacy

Our website and services are not intended for children under the age of 18 unless a particular service expressly states otherwise.

We do not knowingly collect personal information from children in circumstances where such collection is not appropriate or legally permitted.

If we become aware that personal information has been collected from a child without an appropriate legal basis or necessary authorisation, we will take appropriate steps to investigate and address the situation.

Where services are offered to individuals under 18, we will apply appropriate additional safeguards and comply with applicable legal requirements.

18. Third-Party Websites and External Links

Our website may contain links to third-party websites and services.

These websites operate independently of MY HEALTH (SCOTLAND) LTD and may have their own privacy policies and data protection practices.

We are not responsible for the privacy practices or content of external websites.

We recommend reviewing the relevant privacy policy before providing personal information to any third-party website.

19. Automated Decision-Making

We do not intend to make decisions about individuals based solely on automated processing, including profiling, that produce legal or similarly significant effects, unless we have a lawful basis to do so and have implemented the safeguards required by applicable data protection legislation.

Where applicable, we will provide further information about the processing and your rights.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, services, technology or applicable legislation.

Any updated version will be published on our website, together with a revised last-updated date.

Where required by law, we will notify affected individuals of significant changes and obtain any additional consent that may be necessary.

We encourage you to review this Privacy Policy periodically.

21. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is handled, please contact us.

MY HEALTH (SCOTLAND) LTD
Trading as MY HEALTH SCOTLAND

Website: https://www.myhealthscotland.com
Email: info@myhealthscotland.com

Registered company number: SC602992
Registered office: 179a Dalrymple Street, Greenock, Renfrewshire, Scotland, PA15 1BX

Last updated: 01 Nov 2026

Privacy Policy generated by WPLP Legal Pages