Privacy Policy
Effective Date:
September 1st, 2026
This Privacy Policy explains how Wound Care Consultants Ltd collects, uses, stores and
protects personal information, including special category health data, in accordance
with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act
2018. It is written in clear, accessible language as required under Articles 12–14 of UK
GDPR.
Who We Are
Wound Care Consultants Ltd is a specialist clinical consultancy providing wound care,
tissue viability, lymphoedema and related clinical services. We act as the Data
Controller, determining how and why personal data is processed.
What Information We Collect
We collect and process:
Name
Personal identification details (name, date of birth, contact details).
Clinical information, including wound assessments, photographs, treatment plans
and medical history.Relevant bladder, bowel or lymphoedema information when required for clinical
care.
This is special category of health data, which receives enhanced legal protection.
Lawful Basis for Processing
For direct clinical care, our lawful basis is: “Processing is necessary for the provision of
direct healthcare.” For private practice, we rely on:
Training Records
Product Feedback
Explicit consent, or
Legitimate interests, where appropriate.
How We Use Your Information
We use personal data to:
Training Records
Product Feedback
Provide woundcare and clinical services.
Document assessments, treatment plans and clinical outcomes.
Communicate with patients, families, carers and healthcare professionals.
Produce clinical reports, chronologies and medicolegal documentation when
requested.
Sharing Your Information
We only share data when necessary for care delivery or when legally required. This may
include:
Training Records
Product Feedback
GPs, NHS teams, hospitals and care homes.
Legal representatives when instructed by the patient or court.
Thirdparty processors who meet UK GDPR standards.
We never sell personal data.
Confidentiality & Caldicott Principles
All patientidentifiable information is handled according to the Caldicott Principles and
the common law duty of confidentiality, ensuring information is shared only on a
needtoknow basis.