Privacy statement - Battlefield Healthcare

Privacy Policy – Battlefield Healthcare

Last Updated: 10-07-2025

At Battlefield Healthcare Ltd (“we,” “us,” or “our”), we are committed to protecting your personal data and your privacy. This privacy policy outlines how we collect, use, and safeguard your personal information when you access our website or use our healthcare services.

By interacting with us or visiting our website, you accept the practices described in this policy.

Information We Collect

Depending on how you engage with us, we may collect and process the following types of personal data:

Personal Information

Full name
Contact details (email address, phone number, postal address)
Date of birth
National Insurance number
Emergency contact details
GP or medical provider details
Service enquiry or referral information

Health and Care Information (Special Category Data)

Medical history and conditions
Care plans, support needs, or risk assessments
Prescribed medications or treatments
Relevant safeguarding, mental health, or disability data
Notes from consultations, assessments, or care visits

Technical Data

IP address
Browser type, device, and OS
Website interaction data (e.g. pages visited, time spent)

How We Use Your Information

We use your data to:

Provide and manage care, support, and healthcare services
Assess your health and support needs
Respond to enquiries, referrals, or service requests
Maintain accurate records for regulatory and clinical purposes
Contact you or your authorised representative regarding appointments or updates
Comply with legal, safeguarding, and health obligations
Improve our services and user experience

Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

Consent: Where you have explicitly given us permission (e.g. to contact you or share details with another provider)
Contractual Obligation: To provide healthcare or care services under a service agreement
Legal Obligation: To meet statutory or regulatory requirements
Vital Interests: To protect life or wellbeing in emergency or safeguarding situations
Legitimate Interests: For the operation and improvement of our services (where your rights are not overridden)
Public Task: When processing is necessary for a task carried out in the public interest (e.g. healthcare provision)

Where we process special category data (such as medical information), we do so under Article 9(2)(h) of UK GDPR – provision of health or social care.

Data Sharing and Disclosure

We only share your information where necessary and in accordance with data protection laws. This may include sharing with:

Healthcare professionals or organisations (e.g. GPs, consultants, hospitals)
Social care providers or local authorities
Emergency services or safeguarding agencies
Regulators or legal authorities (e.g. CQC, NHS, ICO)
Secure third-party service providers (e.g. data storage, care planning platforms)

All partners or processors are bound by confidentiality and required to maintain appropriate data security standards.

Data Security

We use a range of technical and organisational safeguards to protect your data, including:

Secure servers and encrypted systems
Role-based access to client records
Regular staff training on confidentiality and data handling
Physical security in our offices

Despite our efforts, no system is entirely risk-free. Please contact us immediately if you suspect any data issue.

Data Retention

We retain personal data only as long as is necessary to:

Provide care or healthcare services
Meet legal and regulatory record-keeping requirements
Comply with contractual or safeguarding obligations

Typically, healthcare records are retained for a minimum of 8 years after the last contact (or longer for child records), in accordance with NHS and regulatory guidance.

Your Rights

Under data protection laws, you have the right to:

Access: Request a copy of your personal data
Rectify: Correct inaccurate or incomplete data
Erase: Request deletion of your data, where appropriate
Restrict: Limit processing in certain situations
Object: Object to processing based on legitimate interests
Data Portability: Request transfer of your data to another provider
Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details below.

Changes to This Policy

We may update this privacy policy from time to time in line with legal requirements or changes in our services. The revised version will be posted on our website with an updated “Last Updated” date.