Privacy Policy

    Your privacy and data protection are fundamental to how we operate at Harrington Clinic

    Last updated: 26 August 2026

    Welcome to The Harrington Clinic Privacy Notice

    This Privacy Policy sets out how The Harrington Clinic processes your personal information. It explains how we collect information, what we do with it, how we protect it, and what controls or rights you have.

    We are committed to protecting the privacy of our patients and anyone else we deal with, and will treat all information you give us with the utmost care and in accordance with UK data protection laws.

    We promise to:

    • • Tell you why we collect personal information, how we do this and what we use it for
    • • Only collect the information we need to deliver our medical services to you
    • • Keep your personal information up to date and ensure it is safe and secure

    By providing your personal data to us or by using our services or website, you are accepting and consenting to the terms of this Privacy Policy. We may update this policy from time to time, and the date of the last update is shown at the end of this document.

    Data Controller

    The Harrington Clinic Ltd is the data controller for the personal information we process. This means we are responsible for deciding how and why we process your personal data.

    Registered Company: The Harrington Clinic Ltd
    ICO Registration Number: ZB990715
    Registration Date: 17 September 2025
    Data Protection Officer: Mr Faisal Qureshi

    Other trading names:

    • • Harrington
    • • The Harrington Clinic

    Contact Details:
    The Harrington Clinic
    104 Chequer House,
    12 King Street
    King's Lynn, West Norfolk
    PE30 1ES
    Email: contact@harringtonclinic.co.uk

    Information We Collect

    We collect and process various types of personal information to provide you with our medical services:

    Personal Details

    • • Name, date of birth, and contact information
    • • Address and identification documents
    • • Emergency contact details

    Medical Information

    • • Medical history and current health conditions
    • • Blood test results and laboratory data
    • • Treatment plans and medication information
    • • Consultation notes and medical assessments

    Digital Information

    • • Website usage data and cookies
    • • Communication records (emails, messages)
    • • Appointment and booking information, including the answers you give in the free initial call booking questions, which we store to prepare for your call

    How We Use Your Information

    We use your personal information for the following purposes:

    Medical Care & Treatment

    To provide medical consultations, testosterone replacement therapy, monitor your health, and ensure safe and effective treatment.

    Communication

    To communicate with you about appointments, test results, treatment updates, and important medical information.

    Legal & Regulatory Compliance

    To comply with medical regulations, maintain proper medical records, and meet our professional obligations as healthcare providers.

    Service Improvement

    To improve our services, website functionality, and patient experience through analysis of anonymized data.

    Sharing Your Information

    We may share your personal information with trusted third parties in the following circumstances:

    Blood Testing Laboratories

    We share necessary information with accredited blood testing laboratories to process your blood samples and provide accurate test results.

    Healthcare Professionals

    With your consent, we may share information with your GP or other healthcare providers to ensure coordinated care and patient safety.

    Legal Requirements

    We may disclose information when required by law, court order, or to protect public health and safety.

    Service Providers

    Trusted technology providers who help us deliver our services, all bound by strict confidentiality agreements.

    Advertising and Measurement

    If you accept marketing cookies, we share limited information with Meta Platforms Ireland Limited (Facebook and Instagram) so we can measure which adverts lead to bookings and purchases, and improve how our adverts are shown. This covers the pages you view, the products you buy, the order value, and — sent from our servers in a scrambled (hashed) form — your name, email address, phone number and postal town. We also share limited website usage information with Google Analytics if you accept analytics cookies. We never share your symptom answers, blood results, prescriptions or any other health information with an advertising or analytics provider. You can change or withdraw your choice at any time from the Cookie settings link in the footer.

    We will never sell your personal information to third parties for marketing purposes.

    Data Security

    We implement robust security measures to protect your personal information:

    Encryption

    All data is encrypted in transit and at rest using industry-standard protocols.

    Access Controls

    Strict access controls ensure only authorized personnel can access your data.

    Monitoring

    Continuous monitoring for security threats and unauthorized access attempts.

    Staff Training

    Regular data protection training for all staff handling personal information.

    Your Rights

    Under UK data protection law, you have several rights regarding your personal information:

    1. Right to Access

    Request a copy of the personal information we hold about you

    2. Right to Rectification

    Request correction of inaccurate or incomplete information

    3. Right to Erasure

    Request deletion of your data (subject to medical record requirements)

    4. Right to Portability

    Request your data in a portable format to transfer to another provider

    5. Right to Object

    Object to certain types of processing of your personal data

    To exercise any of these rights: Contact us at contact@harringtonclinic.co.uk or write to us at our registered address. We will respond to your request within one month.

    Subject Access Requests (SARs)

    A Subject Access Request (SAR) is a request for a copy of the personal information we hold about you. You can make a SAR free of charge.

    How to submit a SAR

    Email your request to contact@harringtonclinic.co.uk with the subject line "Subject Access Request", or write to us at our registered address below. Please describe the information you are requesting so we can locate it.

    Identity verification

    We will verify your identity before actioning a SAR, to make sure personal and medical information is not disclosed to the wrong person. We may ask you for photographic ID and proof of address. The one-month response period starts once we have received the information we need to verify your identity.

    Response timeframe

    We will respond within one calendar month of receipt of your request. Where a request is complex, or where we have received a number of requests from you, we may extend this period by up to a further two months in line with UK GDPR. If an extension is needed, we will tell you within the first month and explain why.

    Who is responsible

    Mr Faisal Qureshi, Registered Manager, is the named owner and point of contact for Subject Access Requests and acts as our data protection contact. If you are unhappy with how we have handled your SAR, you can complain to the Information Commissioner's Office (see "Contact Us and Complaints" below).

    Data Retention

    We retain your personal information for as long as necessary to provide our services and comply with legal obligations:

    Medical Records

    Retained for a minimum of 8 years after your last consultation, in accordance with NHS guidelines and medical record keeping requirements.

    Administrative Data

    Contact details and administrative information are retained for 3 years after your last interaction with our services.

    Website Data

    Website analytics and cookies are typically retained for 12-24 months unless you withdraw consent earlier.

    Cookies and Website Data

    Our website uses cookies to enhance your browsing experience and provide personalized services:

    Essential Cookies

    Required for the website to function properly, including security features and basic functionality.

    Analytics Cookies

    Help us understand how visitors use our website to improve user experience and content.

    Preference Cookies

    Remember your preferences and settings to provide a more personalized experience.

    You can control cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

    Contact Us and Complaints

    If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

    Contact Information

    Email: contact@harringtonclinic.co.uk
    Address:
    The Harrington Clinic
    104 Chequer House,
    12 King Street
    King's Lynn, West Norfolk
    PE30 1ES

    Data Protection Complaints

    If you are not satisfied with our response, you can contact the Information Commissioner's Office (ICO):
    Website: ico.org.uk
    Phone: 0303 123 1113

    Updates to This Policy

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

    • • Posting the updated policy on our website
    • • Sending notification via email if you are a registered patient
    • • Providing notice during your next consultation or communication

    We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

    This Privacy Policy was last updated on 26 August 2026

    Version 1.3 - Effective from 26 August 2026