PRIVACY POLICY - BLOOM HEALTH HOSPITALS LTD
Location: Milton Keynes, UK
Last updated: 27-11-2025
Bloom Health Hospitals Ltd (“we”, “our”, “us”) is committed to protecting your privacy and ensuring that your personal data is handled lawfully, fairly, and transparently in accordance with the UK GDPR, Data Protection Act 2018, and NHS/UK healthcare confidentiality standards.
This Privacy Policy explains how we collect, use, store, share, and protect your information when you access our website, receive medical treatment, or interact with us.
1. Who We Are
Bloom Health Hospitals Ltd
Registered Office: 3 Barrett Court, 70 Cardiff Road, Reading, RG1 8ED, United Kingdom
Company Registration Number (CRN): 15494321
Contact email: compliance@bloom-hospital.co.uk
This Privacy Policy explains how we collect, use, store, share, and protect your information when you access our website, receive medical treatment, or interact with us.
2. Personal Data We Collect
We may collect the following categories of data:
a) Identity And Contact Information
- Full name
- Date of birth
- Address
- Email address
- Phone number
- Emergency contact details
b) Medical And Health Information (Special Category Data)
This includes, but is not limited to:
- Medical history
- Diagnosis and treatment plans
- Imaging, pathology, and diagnostic reports
- Consultation notes
- Medication details
- GP referral and previous medical records
- NHS number (where applicable)
c) Appointment And Service Information
- Consultation bookings
- Payment records
- Insurance details
- Communications related to treatment
d) Website & Technical Data
Collected through cookies or analytics:
- IP address (anonymised where possible)
- Device and browser type
- Website usage and behavioural patterns
- Google Analytics data
- Google Ads conversions
- Social media pixels (Meta, TikTok, LinkedIn) tracking
- Email marketing engagement (open/click rates)
e) Marketing & Communication Preferences
- Consent to email marketing
- Subscription preferences
- Opt-out records
3. Legal Basis for Processing
At Bloom, we always process your data under the following lawful bases of UK GDPR, all to ensure that you receive the highest standard of care:
Healthcare Provision
For delivering safe, effective medical care, we abide by Article 6(1)(e) & Article 9(2)(h) including:
- Diagnosis
- Treatment
- Referrals
- Medical reporting
Consent
At Bloom, we always process your data under the following lawful bases of UK GDPR, all to ensure that you receive the highest standard of care:
- Marketing communications
- Analytics/advertising cookies
- Optional tracking tools
- Patient feedback (when not required for care)
You can withdraw consent at any time through contacting the DPO.
Legal Obligations
At Bloom, we always process your data under the following lawful bases of UK GDPR, all to ensure that you receive the highest standard of care:
- UK healthcare laws
- Data accuracy requirements
- Record-keeping rules
- Safeguarding obligations
Legitimate Interests
The following are legitimate interests for our data collection, under Article 6 (1)(f), For purposes such as:
- Improving services
- Website optimisation
- Security and fraud monitoring
4. How We Use Your Information
The primary instances in which we may use your data to:
Healthcare Delivery
- Provide diagnosis, treatment, and medical consultations
- Maintain accurate clinical records
- Share information with clinicians involved in your care
- Handle tests, imaging, and referrals
Administrative & Operational
- Manage appointments
- Process payments and insurance
- Improve patient experience
Marketing
We only send marketing emails with your explicit opt-in consent. This may include:
- Health updates
- Service announcements
- Promotions
- Event information
Email marketing tools may track:
- Opens
- Clicks
- Devices used
You may unsubscribe at any time, and your consent record is securely maintained.
Analytics & Digital Tracking
We use tracking technologies to:
- Improve website performance
- Understand user behaviour
- Optimise ads (Google, Meta, TikTok, LinkedIn)
- Measure campaign effectiveness
Tracking is only enabled after consent.
5. Sharing Your Information
We may share personal data with; this is subject to your consent:
Healthcare Providers
- Clinicians and consultants
- Diagnostic laboratories
- Imaging centres
- NHS services (as part of your care pathway)
Technology & Service Partners
- Website hosting providers
- Email marketing providers (Brevo/Klaviyo)
- Google Analytics
- Google Ads
- Meta/TikTok/LinkedIn pixel partners
Regulatory Bodies
We may share information with the required regulatory bodies, only in instances where there is a legal and statutory obligation. At Bloom, the integrity of our data is central to our organisation.
We do not sell personal data.
6. Data Retention
Medical records are stored in accordance with UK healthcare retention standards, typically:
- Adult medical records: 8 years from last contact
- Children’s records: until age 25
- Imaging/diagnostic records: per NHS retention schedule
- Marketing consent records: until consent withdrawn
Website analytics data is retained according to third-party policies.
7. Your Rights Under GDPR
You have the right to:
- Access your data
- Request correction
- Request deletion (where applicable)
- Restrict processing
- Withdraw consent
- Object to marketing
- Data portability
To exercise rights, email:compliance@bloom-hospital.co.uk
You may also contact the DPO at dpo@bloom-hospital.co.uk to find out more information regarding these rights.
8. Cookies & Tracking Technologies
We use cookies to enhance your experience. You can manage your preferences through our Cookie Consent Banner.
Types of Cookies We Use:
- Essential Cookies: Required for website functionality
- Analytics Cookies: Google Analytics (requires consent)
- Marketing Cookies: Meta, TikTok, LinkedIn (requires consent)
9. International Data Transfers
We primarily store data within the UK/EEA. If data is transferred outside these regions (e.g., to US-based service providers), we ensure Standard Contractual Clauses (SCCs) or equivalent protections are in place.
10. Changes to This Policy
We may update this policy periodically. Significant changes will be notified via our website or email.
11. Contact Us
If you have questions about this policy or your data, please contact:
Data Protection Officer (DPO)
Email: dpo@bloom-hospital.co.uk
Address:Bloom Health Hospitals Ltd, 3 Barrett Court, 70 Cardiff Road, Reading, RG1 8ED
MEDICAL DISCLAIMER
The content on the Bloom Health Hospitals website, including articles, blogs, service descriptions, and general health information, is provided for educational and informational purposes only.
It is not a substitute for professional medical advice, diagnosis, or treatment.
You should always:
- Consult a qualified healthcare professional for personalised medical advice
- Not disregard medical advice because of something you read on our site
- Seek immediate emergency care if your condition is urgent
Bloom Health Hospitals Ltd does not guarantee that the information on the website is fully accurate, complete, or up to date at all times.
Any reliance on the website's content is at your own risk.
Find Us Easily
Reach Us Anytime
