Legal
Privacy Policy
Last updated: October 2026.
This page is maintained by The Armstrong Clinic to explain how we handle personal information when you use this website or become a patient. We are the data controller for the information described below.
The data controller is The Armstrong Clinic Ltd, a company registered in England and Wales (company number 17378525), whose registered office is at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
Information we collect
When you submit an enquiry we collect your name, email address and, if you provide them, your phone number, preferred location, service of interest, preferred appointment date and time, and anything you write in your message.
If you become a patient, we also record clinical information necessary for safe assessment, treatment and prescribing, for example your medical history, current medication, allergies and treatment records.
If you complete an online questionnaire, such as the weight management assessment, we keep your answers whatever the outcome, including when treatment isn’t suitable. This is part of the clinical record: it shows what was asked, what you told us and why a decision was made, and it is kept for clinical governance in the same way as other clinical records.
If you tell us about access needs (for example larger text, someone attending with you, an interpreter or step-free access), or give consent for your prescription details to be shared with the dispensing pharmacy, we record what you chose, when, and who recorded it, so that we can act on it.
If you pay online, card details are entered directly into our payment provider's secure checkout. We never see or store your full card number.
Why we use it
- To respond to your enquiry and arrange appointments.
- To provide clinical care, prescribing and aftercare safely.
- To take and record payment for services.
- To meet our legal, professional and record-keeping obligations.
- With your consent, to understand how the website is used.
Legal basis
We rely on your consent for enquiries and optional analytics cookies, on contract for services you ask us to provide, on legal obligation for records we must keep, and, for health information, on the additional condition relating to the provision of health care by a regulated health professional.
Who we share it with
We share information only where necessary: with our secure hosting and database provider, our payment provider for processing payments, our analytics provider (only if you accept analytics cookies), pharmacies where a prescription is issued, and other healthcare professionals where clinically appropriate or legally required. We never sell your information.
How long we keep it
Website enquiries that do not lead to treatment are kept for up to 24 months. Clinical records, including questionnaires and consultation notes, are kept for 8 years after your last contact with us, in line with professional guidance for adult healthcare records. Payment records are kept for 6 years, as tax law requires. At the end of those periods they are deleted.
Security
Information is stored on access-controlled, encrypted-in-transit systems. Access to clinical information is restricted to the treating clinician.
Your rights
You have the right to access a copy of your information, to have inaccurate information corrected, to object to or restrict certain processing, to withdraw consent, and in some circumstances to request erasure or portability. Clinical records cannot always be erased where we have a professional duty to retain them.
If you ask us to delete your account, we close your login and remove your contact preferences straight away. Your clinical and payment records are kept, locked so they are no longer linked to any login and used for nothing else, for the periods above, and then deleted. We keep a record of your request and what we did, and we email you to confirm.
Each right, what it actually gets you, how to ask and how long we take is set out on Data protection and your rights.
To exercise any right, contact kim@thearmstrongclinic.com. If you are unhappy with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.
ICO Registration
The Armstrong Clinic Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller.
ICO Registration Reference: ZC267185
Contact
The Armstrong Clinic · kim@thearmstrongclinic.com · +44 (0) 7706 077888
Registered office: The Armstrong Clinic Ltd, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Questions
Something here you would like explained?
If any part of this affects a decision you are making about your care, ask. Kim replies to enquiries personally.
Or call +44 (0) 7706 077888email kim@thearmstrongclinic.com
