At Sonar Informatics LTD, your privacy and health data security are our top priorities. This Privacy Notice outlines how we collect, process, retain, and protect your personal information in full compliance with UK Data Protection regulations and NHS Information Governance standards.
1. Legal Framework & Applicable Legislation
The processing of personal and clinical data by Sonar Informatics LTD is governed by UK legislation, including:
Data Protection Act 2018 (UK GDPR)
Governs fair, transparent, and lawful processing of personal and special category health data.
Health & Care Legislation
Includes Health & Social Care Act standards and Common Law Duty of Confidentiality.
2. Why We Collect Your Data & How It Is Used
We only collect information necessary to deliver safe, effective NHS and private pharmacy clinical services. Core purposes include:
- Clinical Consultations: Triage assessments, prescription screening, and health history reviews.
- Pharmacy Walk-In Services: Scheduling appointments and communicating booking details with your chosen local pharmacy.
- Administration & Records: Maintaining accurate patient records and auditing clinical safety standards.
- Research & Quality Improvement: Anonymized statistical reporting to improve NHS public health pathways.
3. Information We Collect
Personal Identifiers
Full name, date of birth, contact phone number, email address, and home postcode.
Health Data
Symptom declarations, medical conditions, medication history, and consultation notes.
Technical Logs
IP address, browser type, device information, and secure access timestamps.
4. Sharing Your Information & Data Protection
We do not sell, rent, or trade your personal information. Information is only shared with authorized healthcare providers, such as:
- Qualified pharmacists and prescribers handling your consultation.
- Your NHS GP surgery (only where required for clinical safety or with your consent).
- Regulatory health authorities (such as CQC or GPhC) when required by law.
You have the right to request access to your records (Subject Access Request), request correction of inaccuracies, object to automated decision-making, and request data erasure where legally permissible.
5. Contact Our Data Protection Officer (DPO)
If you have questions regarding this privacy policy or wish to exercise your data rights, please contact our Data Protection & Governance team at dpo@sonarhealth.org or via our patient support channels.