Privacy notice

Last updated: 16/08/2026

This notice explains what personal information Professor Emily Henderson and Senectus Medical Ltd collect about you, why, and what rights you have. Please read it, and contact us with any questions.

Who is responsible for your information

Senectus Medical Ltd is the data controller for the private practice of Professor Emily Henderson. We are registered in England and Wales, company number [x], registered office [address]. We are registered with the Information Commissioner's Office, registration number [x].*

When Professor Henderson sees you at Nuffield Health Bristol Hospital or at Minchinhampton Surgery, those organisations are separate data controllers for their own records. This notice covers only the information held by the private practice.

What we collect

Depending on how you contact us and what care you receive, we may hold: your name, date of birth, postal address, telephone number and email; your GP's details; your reason for seeking an appointment; and, where relevant, your insurer and policy details.

As part of your care we will also hold health information: your medical history, examination findings, test and scan results, medicines, and the letters and reports produced for you. Health data is "special category" information under UK data protection law and is treated with particular care.

Why we hold it, and our lawful basis

We process your personal data to arrange and provide your care, to write to you and your GP, to keep accurate medical records, and to handle billing and any complaint or claim.

Our lawful basis under the UK GDPR is Article 6(1)(b), taking steps at your request and performing our agreement to provide care, and for health information, Article 9(2)(h), the provision of healthcare by a professional bound by a duty of confidentiality. Where we rely on your consent, for example to copy a report to a third party, you are free to decline or to withdraw that consent later.

Who we share it with

We share only what is necessary, and only with: your GP and other clinicians involved in your care, with your agreement; your insurer or other payer, where they are settling your account; laboratories and imaging providers carrying out tests we request; and our medical defence organisation and professional advisers, if a complaint or claim arises. We may share information where the law requires it, or to protect someone's vital interests in an emergency. We do not sell your information or use it for marketing.

How long we keep it

We keep private medical records for [retention period, confirm against current GMC and Records Management Code guidance] before secure destruction. This may be extended where there is a complaint, a claim, or a legal requirement to hold them longer.

How we keep it safe

Records are held securely in the UK, in both paper and encrypted electronic form with access limited to Professor Henderson and her secretary.

Your rights

You have the right to see the information we hold about you, to have it corrected, to ask us to delete it, to restrict or object to how we use it, and to data portability, in each case subject to the limits the law allows for medical records. To exercise any of these, contact us at secretary@senectus-medical.co.uk.

Complaints about your data

If you are unhappy with how we have handled your information, please tell us first, at secretary@senectus-medical.co.uk, so we can put it right. We will acknowledge within 14 days. If you remain dissatisfied you can complain to the Information Commissioner's Office, ico.org.uk, 0303 123 1113.