Appointment only
Garston, Watford - WD25 9RA
Contact #
07749119688
Send a Message
contact now!
Opening Hours
6 days a week - view here

Privacy Policy

Watford Injury ClinicPrivacy Policy

Privacy Policy

Last Updated: 6 September 2026

At Watford Injury Clinic LTD, we are committed to protecting and respecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or receive clinical care from us.

We operate in strict accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Watford Injury Clinic LTD is the Data Controller responsible for your personal information.

  • Business Name: Watford Injury Clinic LTD

  • Registered Address: 18 Bovingdon Crescent, Watford, Herts, WD25 9RA

  • Email: Data@WatfordInjuryClinic.co.uk

  • Phone: 07749 119688

  • Information Commissioner’s Office (ICO) Registration Number: ZB972122

If you have any questions about this policy or how your data is handled, please contact us using the details above.

2. Information We Collect

We collect and process different types of information depending on how you interact with us:

A. Website Visitors

  • Contact Form Data: When you submit an enquiry through our website contact form, we collect your name, email address, phone number, and any message content you provide.

  • Technical & Usage Data: IP addresses, browser types, page visits, and referral sources collected via analytical tracking tools and website hosting logs.

B. Clinical Patients

  • Personal Identification: Name, date of birth, contact details, emergency contacts, and occupation.

  • Special Category Data (Health Data): Medical history, injury details, treatment plans, clinical notes, and assessment records.

3. Lawful Basis for Processing Data

Under UK GDPR, we rely on the following lawful bases to process your information:

  • Consent: When you fill out a contact form or accept optional cookies on our website.

  • Contractual Necessity: To provide you with assessment, treatment, and clinical appointment management.

  • Legal Obligation & Legitimate Interests: To maintain proper business records and satisfy professional, legal, and financial requirements.

  • Special Category Data (Health Data – Article 9 UK GDPR): We process health data under Article 9(2)(h) for the provision of health or social care or treatment, and for defending potential legal claims.

4. How We Use Your Information

We use your data to:

  • Respond to contact form enquiries and consult with prospective patients.

  • Manage clinical appointments, send appointment reminders, and deliver clinical care.

  • Maintain accurate medical history records and treatment notes.

  • Improve website functionality, safety, and performance.

  • Comply with legal, regulatory, and professional insurance requirements.

5. Third-Party Data Processors & Software

We use reputable third-party services to support our business operations. Each provider operates under strict data security standards:

  • Clinical Practice Management System (Nottero): We use Nottero to securely manage patient intake, clinical records, appointment scheduling, and treatment documentation.

  • Website Hosting (20i): Our website and form submissions are hosted on secure servers managed by 20i Web Hosting.

  • Cookie Management (CookieYes): We use CookieYes to manage visitor cookie preferences and ensure explicit consent for non-essential cookies.

  • Analytics (Google Analytics): We use Google Analytics to aggregate anonymous usage statistics to understand how visitors interact with our website.

6. Cookies & Tracking Technologies

Our website uses cookies to enhance user experience and analyze web traffic.

  • Essential Cookies: Necessary for the site to function properly.

  • Analytics Cookies (Google Analytics): Collect anonymous performance data. These are only activated if you opt-in via our CookieYes banner on your first visit.

You can modify or withdraw your cookie consent at any time via the cookie preferences link in our website footer.

7. How Long We Keep Your Data (Data Retention)

We adhere to standard professional and insurance guidelines regarding record retention:

  • Clinical Records: In accordance with our professional indemnity insurer (BGI) and clinical standards, patient records and health data are retained for a minimum of 10 years from the date of your last treatment. For children, records are retained until 10 years after their 18th birthday (age 28).

  • General Website Enquiries: Contact form messages that do not lead to clinical treatment are retained for no longer than 12 months.

  • Analytics Data: Website traffic data retained by Google Analytics is set to automatically expire after standard minimum retention periods.

After the relevant retention period expires, data is securely destroyed or permanently anonymized.

8. How We Safeguard Your Information

We take appropriate technical and organizational measures to prevent unauthorized access, loss, or misuse of your personal data. This includes:

  • Encrypted SSL (HTTPS) transmission across our website.

  • Secure access controls, multi-factor authentication, and encryption within Nottero and 20i servers.

  • Restricting access to clinical data strictly to authorized clinic staff.

9. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of Access (Subject Access Request): You can request copies of the personal data and health records we hold about you.

  • Right to Rectification: You can ask us to correct inaccurate or incomplete information.

  • Right to Erasure (“Right to be Forgotten”): You can request that we delete your data. Please note: This right does not override our legal and insurance obligation to retain clinical notes for the mandatory 10-year period.

  • Right to Restrict or Object: You can object to processing based on legitimate interests or request that we restrict how we use your data.

  • Right to Withdraw Consent: Where processing relies on consent (e.g., website cookies), you can withdraw consent at any time.

To exercise any of these rights, please contact us at Data@WatfordInjuryClinic.co.uk.

10. How to Complain

If you have concerns about how we handle your data, please contact us first so we can resolve the issue.

If you remain dissatisfied, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)

  • Website: https://ico.org.uk

  • Helpline: 0303 123 1113

  • Clinic ICO Registration Number: ZB972122