Legal
Privacy Policy
Last updated: 9 July 2026
Who we are
Pause and Co Healthcare Ltd ("we", "us") is a private medical clinic registered in England and Wales. Dr Nadira Awal (GMC registered) is the data controller for the purposes of UK GDPR and the Data Protection Act 2018.
What information we collect
- Contact details you provide (name, email, phone).
- Clinical information you share during consultations and via secure forms.
- Payment metadata processed by our regulated payment provider (we do not store card details).
- Website analytics data (aggregated, non-identifying) to help improve the site.
Lawful basis
We process personal data under contract (to provide medical services you have requested), legitimate interest (running our clinic and website), legal obligation (medical record retention) and — for special category health data — explicit consent and Article 9(2)(h) UK GDPR (provision of healthcare).
Sharing your information
We share information only with your consent, or where lawfully required (for example with the NHS when issuing an FP10 prescription, or with your GP when clinically appropriate). We never sell your data.
Retention
Medical records are retained for a minimum of 10 years in line with GMC and Records Management Code of Practice guidance.
Your rights
You have the right to access, correct, erase (subject to medical record retention), restrict processing, object, and to data portability. Contact us at info@pauseandcohealthcare.com to exercise any of these rights. You may also complain to the ICO at ico.org.uk.
Cookies
We use only essential cookies required for the site to function and, where you consent, privacy-respecting analytics to improve our content.
