Privacy notice
This notice explains what Ravelston Health Ltd does with your personal information. It applies to patients, to people who contact us, and to employees of organisations we provide occupational health services to.
Who we are
Ravelston Health Ltd, 12 Ravelston Terrace, Edinburgh EH4 3TP. Registered in Scotland, company number SC471902. We are registered with the Information Commissioner's Office, registration Z8241663. Our practice manager, Aileen Sutherland, is the point of contact for data protection questions.
What we hold and why
We hold the clinical record of your care here: what you told us, what we found, what we tested, what we advised and what we prescribed. We hold your contact details, and where relevant your insurer and policy number.
Our lawful basis for holding health data is the provision of health care under Article 9(2)(h) of the UK GDPR, alongside our legitimate interest in running the practice and our legal obligations to keep proper records.
Who we share it with
- The accredited laboratory that processes your samples, which receives only what it needs to run and report the test.
- Your NHS GP, where you have consented. We recommend this and we do not do it without your agreement.
- A consultant or imaging provider, where you have agreed to a referral.
- Your insurer, where you are claiming and have authorised us to invoice them. They receive the information needed to process the claim and no more.
We do not sell your data, we do not use it for advertising, and we do not share it with your employer. For occupational health work, a management referral report reaches the employer only with the employee's written consent and only after the employee has read it.
How long we keep it
Adult clinical records are retained for a minimum of ten years after the last contact, in line with Scottish records management practice for health records. Children's records are kept until their twenty-fifth birthday, or their twenty-sixth if they were seventeen at the last entry. Records are then securely destroyed.
Where it is held
On a UK-hosted clinical system, encrypted at rest and in transit, with access limited to staff who need it and every access logged. Paper records are held in locked storage on the premises.
Your rights
You can ask for a copy of your record, and we will provide it within one month at no charge. You can ask us to correct anything factually wrong. You can object to particular processing, and you can complain to the Information Commissioner's Office if you are not satisfied with how we have handled your data. Please raise it with us first — it is usually quicker.
This website
This site sets no advertising cookies, uses no third-party analytics and no tracking pixels. The booking and health check tools run entirely in your browser; nothing you enter into them is transmitted to us or stored anywhere until you deliberately send a form. Fonts are loaded from Google Fonts, which will see your IP address as part of that request.