We keep your data safe...

The Mackay Clinic provides administrative support to Professor Gordon Mackay, an orthopaedic surgeon working independently and providing medical advice and treatment to patients who are funding their care privately.

In order to provide that service to patients the Mackay Clinic processes personal data and health data and this notice is intended to give information about how that information is obtained and shared, stored and retained.

1 Our contact details

If you have any queries or concerns about how we are using your personal data then please contact our data protection officer on office@mackayclinic.co.uk

 

2 The type of personal information we use

We currently collect and process the following information:

· Contact details when you are referred to us or contact us to arrange a consultation

· Medical information about you to provide you with a recommendation

· Information about the treatment you receive from Professor Mackay

· Follow up information to inform our clinical research

 

3 How we get the personal information and our legal basis for using it

Most of the personal information we process is provided to us directly by you.

In order to arrange a consultation with Professor Mackay, we will refer you to Circle Health at the most appropriate hospital and who will arrange the consultation. They will also process your personal data and health data when you consult and are treated by Professor Mackay and their privacy information can be found here: Privacy notices

During your consultation and any subsequent treatment the Mackay Clinic will hold clinical records about the care you receive from Professor Mackay.

We sometimes receive personal information indirectly, from the following sources in the following scenarios:

· from the referring practitioner who referred you to us;

· from Circle Health Group if relevant to your care; and

· from your health insurer.

 

4 What we do with your information and who we share it with

· Contact information is shared with Circle Health so that they can arrange an appointment and also to allow them to hold a medical record about your treatment.

· A letter will be shared with the referring practitioner following your initial consultation, unless you advise us not to.

· Minimal health information will be shared with any relevant insurer to allow them make appropriate payment for treatment.

Information we hold about you will be held in digital and papers format.

We use specialist medical software to store any digital information securely and to allows us to communicate with you.

We are confident that this software has adequate security in place and we have written contracts with these providers setting out security requirements and only permitting them to access the data for specific circumstances and in in accordance with our instructions. They are not permitted to use this data for their own purposes.

 

5 Lawful basis for processing your data

We process personal data when it is necessary to give you the medical services you have asked us to provide.

We will sometimes rely on your consent, for example to ask follow up questions for medical research purposes and to help improve our services.

We process health data in order to provide you with a medical diagnosis and medical care under the direction of Professor Mackay. With your explicit consent we process health data for medical research purposes.

In general we will share information about your treatment with the referring practitioner with your permission however there may be occasions when we consider that it is necessary to share health information with others if Professor Mackay believes that there is a safeguarding or similar risk.

 

6 Retention and security

We retain our digital medical records for seven years after your treatment concludes and our paper records for three years.

We have put in place appropriate security measures to protect your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

 

7 Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for a copy of your personal information and for further information about how we use your information. This notice should answer most of your questions but you should contact us if you have further queries.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal information in certain circumstances. You have an absolute right to ask us to stop sending you marketing material and updates about our services.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

There is no charge for exercising these rights unless your request is manifestly unfounded or excessive. If it is, we will charge a reasonable fee or refuse to comply with your request.

Once a request is made, it will be acknowledged and we may ask for confirmation of identification from the requester and seek clarification of this request.

We will do our best to respond without undue delay and within one month of receiving your request. However, if the request is complex we can extend that by another two months but if we do need more time, we will let you know why.

Please make any requests using the contact details above.

 

8 How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at using the contact details above. We will do our best to address any concerns that you have.

However you can also complain to the ICO if you are unhappy with how we have used your data. If you have not raised the issue with us already, the ICO will refer the complaint back to us to address your concerns so please do contact us first. The contact details for the ICO can be found here.

 

9 Changes to our privacy notice

We keep our privacy notice under review and will require to make changes from time to time. We will highlight any substantial updates on our website.

Version Control:

Policy updated - 30/09/2026

The purpose of this statement is to explain to you what personal information we collect and how we may use it.

 

1 About Us

This website www.mackayclinic.co.uk is owned and operated by The Mackay Clinic Ltd., a company registered in Scotland no. 489939 having its registered offices at 3 Claremont Gardens, Glasgow G3 7LW

The Mackay Clinic Ltd is committed to protecting your privacy and maintaining the security of any personal information received from you. We strictly adhere to the requirements of the data protection legislation in the UK and we are registered on the Data Protection Public Register number Z5872266

2 Information we collect about you

When you get in touch via our website we may collect your name, email address and other contact details. This allows us to process your queries.

We do not collect sensitive information about you except when you specifically knowingly provide it and have consented to this.

3 What we do with your Information

We use your personal information soley within the context of your medical care

4 Sharing your information with Third Parties

We do not provide any information to third parties except where you have given us prior consent for example to your GP or Physiotherapist

5 Cookies

This website uses cookies. For more information about what cookies are, what we use them for and how you can delete them, please read our Cookies Policy.

6 How we Protect your Information

We follow strict security procedures in the storage and disclosure of information which you have given us, to prevent unauthorised access to, and loss, misuse or alteration of your personal information in accordance with the UK data protection legislation. These include firewalls and virus checking procedures.

Whilst we take steps to ensure the security of your information, there is a risk that any information transmitted over the Internet and stored on a computer may be intercepted or accessed by an unauthorised party. If you think that someone has accessed your information held by us without your permission you must notify us at office@mackayclinic.co.uk