Privacy Policy

SG67 Health Consultancy is a nurse-led health advocacy service specialising in NHS
Continuing Healthcare (CHC) assessments and appeals. We are based in the United
Kingdom and operate as a private consultancy.
For the purposes of data protection law, SG67 Health Consultancy is the Data Controller
responsible for your personal data.

If you have any questions about this policy or how we handle your information, please
contact us at:

• Email: info@sg67healthconsultancy.co.uk

• Phone: 07375113764

• Address: 28 Bowthorpe Road, Norwich, Norfolk, NR2 3TW

We may collect and process the following categories of personal data:
Via our website enquiry form:

• Your name

• Your email address

• Your phone number (if provided)

• The content of your message or enquiry

Via direct communication (phone, email, or in-person):

• Personal and contact details

• Details relevant to your healthcare or CHC case (where voluntarily shared)

• Health or medical information (only where necessary to provide our services)

We do not collect sensitive health data through our website enquiry form. Any health-related
information shared directly with us as part of a consultancy engagement is handled under
separate terms agreed with you at the outset.

We use your personal data only for the following purposes:

• To respond to your enquiry or request for information

• To provide the consultancy services you have engaged us for

• To comply with our legal and regulatory obligations

• To maintain accurate records of our client engagements

We do not use your personal data for marketing or promotional purposes. We will never add
you to a mailing list or contact you with unsolicited communications without your explicit
consent.

Any personal data submitted through the enquiry form on our website is treated with
particular care. Specifically:

• Enquiry form data is stored for a maximum of 24 hours from the time of submission.

• After this period, the data is permanently deleted from our systems.

• This data is used solely to enable us to respond to your enquiry.

• It is never used for marketing, profiling, or passed to any third party.

​

If you would like us to respond to your enquiry, we recommend following up directly by
phone or email if you have not heard from us within 24 hours, as your submission will no
longer be retained in our system.

Under UK GDPR, we rely on the following lawful bases to process your personal data:

• Legitimate interests - to respond to enquiries and manage our business effectively

• Contract - to perform services you have engaged us to provide

• Legal obligation - to comply with applicable laws and regulations

• Consent - where you have explicitly opted in to any communications

Where we process sensitive health data (for example, information relating to a client’s CHC
assessment), we rely on the explicit consent of the individual, or where applicable, the
additional legal bases under Article 9 UK GDPR.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We may share your data only in the following limited circumstances:

• With professional advisers (e.g. solicitors or accountants) where necessary to deliver our services

• With NHS bodies, local authorities, or other statutory organisations where required as part of your CHC case and with your knowledge and consent

• Where required by law, regulation, or court order

Any third parties with whom we share data are required to handle it in accordance with UK
GDPR and are subject to appropriate data processing agreements where applicable.

We keep personal data only for as long as necessary for the purpose for which it was
collected, or as required by law. Our general retention approach is:

• Enquiry form data: deleted within 24 hours (see Section 4)

• Client engagement records: retained for 6 years following the conclusion of an

• engagement, in line with standard professional practice and potential legal

• requirements

• Financial records: retained for 7 years in accordance with HMRC requirements

When data is no longer required, it is securely deleted or destroyed.

Under UK GDPR, you have the following rights in relation to your personal data:

• Right to access - you can request a copy of the personal data we hold about you

• Right to rectification - you can ask us to correct inaccurate or incomplete data

• Right to erasure - you can ask us to delete your data in certain circumstances

• Right to restrict processing - you can ask us to limit how we use your data

• Right to data portability - you can request your data in a structured, machine-readable format

• Right to object - you can object to our processing where we rely on legitimate interests

• Right to withdraw consent - where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us using the details in Section 1. We will respond within one calendar month. You will not be charged for making a request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint
with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk

• Phone: 0303 123 1113

Our website may use cookies and similar tracking technologies to improve your browsing
experience and to understand how visitors use our site. These may include:

• Essential cookies - necessary for the website to function correctly

• Analytics cookies - to help us understand how our site is used (e.g. via tools such as Google Analytics)

You can control cookie preferences through your browser settings. Please note that
disabling certain cookies may affect the functionality of the website.

We take the security of your personal data seriously. We implement appropriate technical
and organisational measures to protect your data against unauthorised access, accidental
loss, alteration, or disclosure. These include:

• Secure email communications

• Password-protected devices and systems

• Limiting access to personal data to those who need it to perform their role

While we take all reasonable steps to protect your data, no system is entirely secure. If you
believe your data has been compromised, please contact us immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices or
legal requirements. The most current version will always be available on our website, and
the date at the top of the policy will be updated accordingly.

We encourage you to review this policy periodically. Continued use of our website or
services following any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or your
personal data, please do not hesitate to get in touch:

• Email: info@sg67healthconsultancy.co.uk

• Phone: 07375113764

• Address: 28 Bowthorpe Road, Norwich, Norfolk, NR2 3TW, United KIngdom

SG67 Health Consultancy is committed to handling your personal data with the care and
discretion it deserves.