Privacy Notice
Last updated: 10 September 2026
AngloMedical respects your privacy and takes the protection of personal and medical information seriously.
This Privacy Notice explains what information we collect, why we use it, who we may share it with, how long we keep it and what rights you have.
1. Who we are
AngloMedical provides medical research, expert search, patient advocacy, and healthcare support and coordination services.
For the purposes of UK data protection law, Anglo Medical Ltd, trading as AngloMedical, is the controller of the personal information described in this Privacy Notice. This means that we are responsible for deciding why and how that information is used.
Postal address:
19 Cavendish Square
London W1G 0PL
United Kingdom
Email: info@anglomedical.com
Telephone: +44 7772 503027
ICO registration number: ZC253650
AngloMedical is not a hospital or medical practice and does not itself provide medical diagnosis or treatment. Any medical opinion, diagnosis or treatment is provided by the relevant independent doctor, clinic, hospital or other healthcare provider.
2. Which data protection laws apply
AngloMedical is established in the United Kingdom and is primarily governed by UK data protection law, including the UK GDPR and the Data Protection Act 2018.
Because we work internationally, data protection laws in another country may also apply in some circumstances.
Where personal information is shared with a doctor, hospital or other organisation outside the UK, we take account of the UK rules governing international transfers and any other applicable legal requirements.
3. What information we may collect
The information we need depends on the nature of your enquiry and the work you ask us to undertake.
It may include personal and contact information, medical and health information, case information, communications, contracts, consent records, invoices and limited technical information generated through use of our website.
Health and genetic information are special category personal data under UK data protection law and receive additional protection.
4. Where we obtain information
We normally obtain personal information directly from you.
We may also receive information from a parent, guardian, family member or authorised representative; doctors, hospitals, clinics or diagnostic providers; organisations involved in your care; professional advisers; or publicly available professional and medical sources.
Where someone provides information about another person, we may ask for evidence that they are authorised to act for that person.
5. How we use your information
We may use personal information to:
- respond to your enquiry and decide whether we may be able to help;
- understand and review your case;
- research medical evidence, expertise and possible treatment options;
- identify and approach suitable specialists, hospitals or clinics;
- seek an expert opinion, appointment or treatment proposal;
- coordinate communications and practical aspects of care;
- provide patient advocacy and support;
- administer our agreement with you and maintain financial records;
- respond to complaints;
- maintain the security of our website and systems;
- establish, exercise or defend legal claims;
- comply with legal and regulatory requirements.
We aim to collect and use only the information reasonably necessary for the work you have asked us to carry out.
6. Our legal basis for using your information
UK data protection law requires us to have a lawful basis for using personal information.
Depending on the circumstances, we may process information because:
- it is necessary to take steps you have requested before entering into an agreement with us;
- it is necessary to provide an agreed service to you;
- it is necessary to comply with a legal obligation;
- it is necessary for legitimate purposes such as administering and protecting our services, maintaining appropriate records, handling complaints or establishing or defending legal claims; or
- you have given us consent.
Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before consent was withdrawn.
7. Medical and other special category information
For medical and health information provided to us in connection with a service you have requested, AngloMedical will generally rely on your explicit consent under Article 9(2)(a) of the UK GDPR.
This consent is separate from the general legal basis on which we provide our services.
Where you include information about your health in an initial enquiry, we rely on your explicit consent to use that information to assess whether and how we may be able to assist.
If we accept the case and require detailed medical records, we will explain what information is needed, how it should be provided and how it will be used.
Before identifiable medical information is shared with a doctor, hospital, clinic or other organisation, we will normally explain who it is to be shared with, for what purpose and obtain the patient’s or authorised representative’s permission, unless another lawful condition applies.
Where identifiable medical information needs to be disclosed to a doctor, hospital, clinic or other healthcare organisation in connection with your case, we will also obtain appropriate authorisation for that disclosure.
In limited circumstances, another condition permitted by data protection law may apply, for example where processing is necessary to establish or defend legal claims or to protect a person’s vital interests.
You may withdraw your consent at any time. If access to your medical information is necessary for the service you have asked us to provide, withdrawal may mean that we are unable to continue working on your case.
8. Your initial enquiry and medical records
We deliberately separate an initial enquiry from the collection of detailed medical records.
When you first contact AngloMedical, please provide only enough information for us to understand the nature of the problem and the assistance you are seeking.
Please do not send full medical records through our initial contact form.
If we believe we may be able to help and medical records are required, we will explain what information we need and how it should be provided.
Access to medical information is limited according to role and need.
Where appropriate, particularly during research or an initial approach to a potential specialist, we may use a case reference or limited clinical summary rather than your full identifying details.
We do not use personal email accounts or informal messaging services as the central record for a medical case.
9. Who we may share information with
Where necessary for the work you have asked us to undertake, we may share relevant information with doctors and healthcare professionals, hospitals and clinics, diagnostic providers, professional advisers, interpreters, relevant service providers and public authorities where required or permitted by law.
We do not sell personal or medical information.
We do not automatically send your complete medical file when contacting a potential specialist. We aim to share only the information reasonably necessary for the purpose.
Doctors, hospitals and other healthcare organisations may be independent data controllers and will have their own responsibilities for how they use that information.
10. International medical searches and transfers
AngloMedical works internationally. A search for appropriate expertise or treatment may involve doctors, hospitals, clinics or other organisations outside the United Kingdom.
An international search does not mean that your full medical records are automatically sent overseas.
Where possible and appropriate, an initial enquiry may be made using limited or de-identified clinical information.
Where identifiable personal information needs to be transferred outside the UK, we take the steps required under UK data protection law to determine whether the transfer is permitted and what safeguards are required.
Healthcare providers outside the UK may also be subject to the data protection, confidentiality and medical-record requirements of their own country.
11. How long we keep information
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any relevant legal, accounting or dispute-resolution requirements.
Our general approach is:
- Initial enquiries not taken forward: normally up to six months after the last substantive contact.
- Active cases: relevant information is retained while the case remains active.
- Medical documents relating to a completed case: normally retained for the duration of the case and for up to twelve months afterwards, unless longer retention is necessary and justified.
- Client agreements, principal case correspondence and service records: normally retained for six years after the engagement ends.
- Invoices and accounting records: normally retained for six years after the end of the relevant financial year.
- Consent and disclosure records: retained for as long as necessary to demonstrate how information was processed and disclosed.
- Complaints or legal claims: retained for as long as reasonably necessary to investigate or resolve the matter and meet relevant legal requirements.
In line with UK data protection law, we may retain genuinely anonymised business data that no longer identify any individual.
When information is no longer required, it will be securely deleted, destroyed or anonymised where appropriate.
12. How we protect information
Medical information requires a high level of protection.
We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, disclosure or misuse.
These include, where appropriate, limiting access according to role and need, secure methods for transferring medical documents, confidentiality requirements, appropriate arrangements with service providers, and security and incident-response procedures.
Our technical security arrangements are reviewed as our systems and services develop.
No internet or electronic storage system can provide an absolute guarantee of security. If a personal-data breach occurs, we will assess it promptly and notify the Information Commissioner’s Office and/or affected individuals where required by law.
13. Children and people represented by others
Where a case concerns a child or a person acting through a representative, we may need to confirm the identity and authority of the person acting for them and whose consent or authorisation is required.
We do not assume that a family relationship alone gives someone unrestricted authority to receive or disclose another person’s medical information.
14. Your data protection rights
Depending on the circumstances, you may have the right to ask what information we hold about you, request a copy, correct inaccurate information, request deletion or restriction in certain circumstances, object to certain processing, withdraw consent, or complain about how your information has been handled.
These rights are not absolute and some apply only in particular circumstances.
To exercise a data protection right, contact ella@anglomedical.com.
15. Cookies and marketing
Our website may use cookies that are necessary for its operation and security.
If we use non-essential analytics, advertising or tracking technologies, we will provide the information and consent choices required by law. Further details will be provided in our Cookie Policy.
We will not add you to a general marketing mailing list simply because you contacted us about a medical case.
16. Questions and complaints
If you have questions about how AngloMedical handles your personal information, wish to exercise a data-protection right or have a privacy concern, please contact:
AngloMedical
Anglo Medical Ltd
19 Cavendish Square
London W1G 0PL
United Kingdom
Email: ella@anglomedical.com
Telephone: +44 7772 503027
You also have the right to raise a concern with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.
If you live outside the United Kingdom, you may also have the right to contact the data protection or privacy authority in the country where you live.
17. Changes to this Privacy Notice
We may update this Privacy Notice as our services, systems, suppliers or legal obligations change.
The current version will be published on our website with the date of the latest update.