Privacy Policy
This policy explains how Dr Dani Menopause Care (a trading name of Astrion Medical Consulting Ltd) collects and uses your personal information when you use this website or receive care from us. We are committed to protecting your privacy and handling your information lawfully, fairly and transparently.
Who we are
Astrion Medical Consulting Ltd, trading as Dr Dani Menopause Care, is the data controller for your clinical information: your pre-consultation questionnaire, consultation notes, prescriptions, test results and correspondence about your care. We are registered with the Information Commissioner’s Office under registration ZC201189. Astrion Medical Consulting Ltd is registered in England and Wales, company number 16271140; registered office: The Long Lodge, 265–269 Kingston Road, London SW19 3NW.
Your care is provided by Dr Daniela Hristova, who is on the GMC Specialist Register (GMC number 6070189).
Your consultation takes place at The Open Practice, Jameson House, Lutyens Close, Basingstoke RG24 8AG, which is registered with the Care Quality Commission (provider: The Open Practice Limited) for the regulated activity of treatment of disease, disorder or injury.
The Open Practice operates the appointment system through which your booking is made and is the data controller for the booking information it holds, under its own ICO registration ZB717037. It does not hold your clinical records. We each act as an independent controller of the information we hold, under a data sharing agreement between us.
If you have any question about your information, or wish to exercise any of the rights set out below, please contact us at drdani@drdanimenopausecare.co.uk or by post to the registered office address above. If your question relates to your appointment booking, you may also contact The Open Practice directly.
Information we collect
Identity and contact details: name, date of birth, address, phone number, email.
Health information: your medical history, symptoms, questionnaire responses, consultation notes, prescriptions, test results and correspondence about your care. This is “special category” data under UK GDPR.
Booking and payment information: appointment details and payment records. Payments for consultations are taken through this website using Squarespace Payments, provided by Squarespace and processed by Stripe. Your card details are entered directly into their secure payment system; we do not see or store your full card details. Appointments are scheduled using Cliniko, the appointment system operated by The Open Practice.
Website usage information: as described in our Cookie Policy.
Why we use your information and our lawful basis
To provide you with medical care: lawful basis - provision of health care (UK GDPR Article 9(2)(h)) and performance of our contract with you (Article 6(1)(b)).
To communicate with your GP and other professionals involved in your care: provision of health care, with your knowledge and, where appropriate, your explicit consent.
To manage bookings, payments and our business records: performance of a contract and our legitimate interests in running the practice.
To meet legal and professional obligations: including record-keeping, insurance and regulatory requirements (Article 6(1)(c)).
Marketing: we will only send you marketing (such as news about talks or services) with your consent and you can withdraw consent at any time.
Who we share your information with
Cliniko, the appointment scheduling system operated by The Open Practice, which holds the booking details you provide when you make an appointment.
Squarespace, who host this website, and Squarespace Payments together with its payment processor Stripe, who process payments you make through this website on our behalf.
Our partner pharmacy (CloudRx) where you choose to have a private prescription dispensed through them.
Your NHS GP and other health professionals involved in your care, with your knowledge and consent.
Laboratories and diagnostic providers where you have tests.
The Open Practice, to the extent necessary for the safe operation of the clinic where you are seen - this includes limited advance appointment information (your name, date of birth, and any accessibility, safeguarding or safety needs relevant to the premises), which The Open Practice holds under its own policies.
Private medical insurers, where you ask us to invoice your insurer or provide information to support a claim.
Our professional advisers, indemnity provider and regulators where required.
We do not sell your information, and we do not transfer it outside the UK except where a service provider does so with appropriate safeguards in place.
How long we keep your information
We keep medical records for a minimum of 8 years from the conclusion of your care, in line with national guidance for private medical records, and business records for as long as required by law (normally 6 years for accounting records). Records are then securely destroyed.
Your rights
You have the right to ask for a copy of your information (subject access), to have inaccurate information corrected, to object to or restrict certain processing, and in limited circumstances to have information erased — although we are usually required to retain medical records for the periods above. To exercise any right, contact us using the details in this policy. You also have the right to complain to the ICO (ico.org.uk / 0303 123 1113), although we would welcome the chance to resolve any concern directly first.
Security
We use appropriate technical and organisational measures to protect your information, including secure clinical systems, access controls and encryption in transit. Please note that ordinary email is not a fully secure medium; where possible we will use secure systems for clinical information, and we ask you to consider this when emailing us health details.
Changes to this policy
We may update this policy from time to time. The current version will always be published on this website, with the date of last revision.