Last Updated: 31/10/2026
SAH Diagnostics Ltd. (“we” or “us”) is committed to protecting the privacy of all individuals using our website and services. This Privacy Policy explains when and why we collect personal data, how we use it, the conditions under which we may disclose it, and how we keep it secure. Please read this policy carefully to understand our practices regarding your personal data.
1. Who We Are
We are SAH Diagnostics Ltd., registered in England and Wales under company number 12562349, with our registered office at 27 Old Gloucester Street, London, Camden, WC1N 3AX. If you have questions about this policy or our data practices, you can contact our Data Protection Officer at enquiry@sahdiagnostics.com.
2. What Personal Data We Collect
Personal data refers to information that can identify you. We collect and process personal data when you use our website or engage with our services. The typical types of personal data we collect include:
- Identification Information: Name, contact details (email, phone number, postal address).
- Employment Information: Information related to your job if relevant to your healthcare or treatment.
- Healthcare Information: Treatment notes, reports, and other healthcare-related data.
- Communications Data: Feedback, inquiries, survey responses, and call recordings.
- Special Category Data: Information about your health, racial or ethnic origin, and other sensitive data. We only process this data with your consent or if required for medical diagnosis or healthcare services.
3. How We Collect Personal Data
We collect personal data from various sources, including:
- Directly from You: When you use our website, fill in forms, or communicate with us.
- Third Parties: From healthcare providers, your GP, hospitals, or family members.
- Our Website: When you send us an enquiry through our contact form. Our website does not use cookies for tracking or advertising (see section 6).
If you give us personal data on behalf of someone else, you must have their consent to do so.
4. How We Use Your Personal Data
We use your personal data for the following purposes:
- Healthcare Services: To deliver our healthcare and diagnostic services.
- Customer Support: To respond to your inquiries and provide support.
- Legal Compliance: To comply with applicable laws and regulations.
- Operational Needs: For quality control, staff training, and research.
- Marketing Communications: With your consent, we may send you promotional communications.
5. Who We Share Your Personal Data With
We may share your personal data with third parties for the following reasons:
- Healthcare Providers: Your GP, hospitals, NHS, or other healthcare entities.
- Service Providers: Third parties who assist in providing our services, such as IT support, Microsoft (email) and Cloudflare (website hosting and security). They act only on our instructions and under contract.
- Legal Compliance: When required by law or to comply with legal processes.
- Business Transfers: In the event of a merger, acquisition, or sale of assets.
Some of our service providers may process personal data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Addendum, or a UK adequacy decision.
6. Our Website and Contact Form
What we collect. When you send an enquiry through our contact form, we collect the details you enter: your name, email address and phone number, how you would like us to reply, and your message. Depending on the type of enquiry, we also collect your job title and organisation, the topic of your enquiry, and for patient enquiries the hospital or clinic, your appointment date and, if you are writing on someone else’s behalf, their name and your relationship to them. We use these details only to reply to your enquiry.
Our lawful basis. For NHS, partnership and general enquiries we rely on our legitimate interests in responding to people who contact us. Patient enquiries may include information about health, so we ask for your explicit consent, which you give by ticking the consent box on the form. You can withdraw your consent at any time by contacting us.
How your enquiry is handled. Your enquiry is not stored on our website. It is sent securely by email to our team’s mailbox in Microsoft 365 and kept only for as long as we need it to deal with your enquiry, in line with our records retention policy. Please do not include detailed medical information in the form.
Keeping the form secure. Our website is hosted by Cloudflare, which also protects it from attacks and spam. When you use the contact form, Cloudflare Turnstile checks that you are a person and not an automated program. It uses technical information such as your IP address and browser details for this check only; it does not use cookies and the information is not used for advertising.
Cookies. Our website does not set cookies for analytics or advertising. It may save a small offline page in your browser so it can let you know if you lose your internet connection. If we add website analytics in future, we will ask for your consent before using any non-essential cookies.
7. How We Store and Secure Your Personal Data
Your personal data is securely stored in compliance with our data security framework, which includes organisational and technical measures to prevent unauthorised access, loss, or damage. We use encryption, access controls, and regular security audits to ensure data security. We are accredited with ISO 9001 Quality Management System, ISO 14001 Environmental Management System, ISO 45001 Health and Safety Management Standard, and ISO 27001 Information Security Management Standard.
8. Your Data Protection Rights
You have rights under data protection legislation, including:
- Right of Access: You can request a copy of your personal data.
- Right to Rectification: You can request correction of inaccurate data.
- Right to Erasure: You can request deletion of your personal data in specific circumstances.
- Right to Restriction of Processing: You can request limited processing of your data.
- Right to Object: You can object to certain types of processing.
- Right to Data Portability: You can request your data in a portable format.
To exercise any of these rights, please contact us at enquiry@sahdiagnostics.com.
9. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy. Please check this page periodically for the most recent version. If you continue to use our website after changes are made, you agree to the updated policy.
10. How to Lodge a Complaint
If you have concerns about how we handle your personal data, please contact us at enquiry@sahdiagnostics.com. If you’re not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office at:
- Address: Wycliffe House, Water Ln, Wilmslow SK9 5AF
- Helpline Number: 0303 123 1113
- ICO Website: https://www.ico.org.uk
Thank you for trusting SAH Diagnostics Ltd. with your personal data. We are committed to protecting your privacy and ensuring the security of your personal information.