Data protection
Minimum data. Controlled access. Clear purpose.
Our information-governance approach separates clinical records from marketing systems and limits access to authorised roles.
Public summary
Privacy by design
Special-category health information requires stronger controls throughout its lifecycle.
Purpose & minimisation
Collect only information needed for referral, assessment, implementation, review and assurance.
Access & security
Role-based access, strong authentication, approved devices, encryption and audit activity where supported.
Retention & incidents
Defined retention, secure disposal, breach assessment and escalation to the appropriate controller.
Do not send detailed clinical information through ordinary contact forms or marketing email. Use the authorised referral or records route provided for the engagement.
Document control: This public summary is reviewed when law, guidance or service delivery changes. Contract-specific versions and supporting evidence are available through due diligence where appropriate.