Skip to content
Home / Privacy policy
Legal and patient information

Privacy policy

Information about your rights, our responsibilities and how the mobile ultrasound service operates.

Last updated: 26 July 2026

1. Who we are

Advance Health Limited provides private mobile diagnostic ultrasound services. For the personal information described in this notice, Advance Health Limited is the data controller unless we explain otherwise.

This notice applies when you browse our website, contact us, make or manage a booking, receive a mobile ultrasound service, pay for a service, or access a report.

For privacy questions or requests, use our contact form and select the most relevant subject. Please do not include unnecessary medical information in an initial enquiry.

2. Information we collect

Depending on how you use our services, we may collect:

  • identity and contact details, including your name, date of birth, email address and telephone number;
  • the mobile visit address and practical access information, such as parking, mobility or care-home instructions;
  • booking information, appointment dates, selected services and communication history;
  • health and clinical information needed to assess suitability, perform the examination and prepare a report;
  • referral information and details of a GP, specialist, carer or authorised representative where relevant;
  • payment status, transaction references, refunds and accounting records (we do not need to store your full payment-card details);
  • consent, chaperone, accessibility and communication-preference records;
  • account, authentication, security and audit information; and
  • technical information such as IP address, browser type, timestamps and essential cookie identifiers.

We usually receive information directly from you. We may also receive it from a person booking with your authority, a referring healthcare professional, an authorised representative, a payment provider or another organisation involved in your care.

3. Why we use information and our lawful bases

We use personal information only where we have a lawful reason. Depending on the purpose, we rely on:

  • Contract: to provide booking, payment, appointment and report-access services you request, or to take steps before entering into a contract;
  • Healthcare provision: health information is special category data. Where applicable, we process it because this is necessary for medical diagnosis or the provision and management of health care, subject to professional confidentiality;
  • Legal obligation: to meet tax, accounting, safeguarding, information-governance and other legal duties;
  • Legitimate interests: to operate and secure the service, prevent fraud, improve administration, respond to enquiries and establish or defend legal claims, after considering your rights;
  • Vital interests: in a rare emergency where processing is necessary to protect life and you cannot provide consent; and
  • Consent: for optional direct marketing or another genuinely optional purpose. You may withdraw consent at any time without affecting earlier lawful use.

Consent to receive clinical care is separate from the data-protection lawful bases described above.

4. How we use your information

We use information to:

  • check suitability and arrange the correct mobile ultrasound examination;
  • allocate an appropriate clinician and portable equipment;
  • attend the address you provide and deliver care safely;
  • verify identity, communicate appointment information and manage changes;
  • create, review, release and securely provide clinical reports;
  • take payment, issue receipts and process refunds;
  • respond to questions, complaints, rights requests and accessibility needs;
  • protect patients, staff, systems and confidential information; and
  • meet clinical-governance, insurance, legal and regulatory requirements.

We do not sell personal or medical information. We do not use solely automated decision-making that produces legal or similarly significant effects.

5. Who we share information with

We share only what is reasonably necessary with:

  • authorised clinicians and staff involved in your care or administration;
  • a referring professional, GP or other healthcare provider where you ask us to do so, where this is necessary for direct care, or where law permits or requires it;
  • carefully selected providers supporting secure hosting, email, appointment communications, payments, records, IT support and professional services;
  • regulators, courts, insurers, law-enforcement or safeguarding bodies where disclosure is legally required or justified; and
  • a buyer or successor if the business is reorganised, subject to confidentiality and data-protection requirements.

Our service providers must protect information and use it only for the agreed service. Where information is transferred outside the UK, we use an approved transfer mechanism and appropriate safeguards where required.

6. Keeping information secure

We use role-based access, authentication controls, audit records, protected report links, secure storage, backups and staff confidentiality requirements. No internet service can guarantee absolute security, so please protect booking-management links and account credentials and tell us promptly if you believe they have been compromised.

7. How long we keep information

We keep information only for as long as needed for the purpose collected and to meet applicable clinical, legal, tax, insurance and regulatory requirements. Retention depends on the type of record, the care provided, patient age, potential claims and any active complaint or investigation. When information is no longer required, we securely delete or anonymise it.

8. Your data-protection rights

Subject to legal conditions and exemptions, you may ask us to:

  • provide access to your personal information;
  • correct inaccurate or incomplete information;
  • erase information;
  • restrict how information is used;
  • provide certain information in a portable format;
  • stop processing based on legitimate interests; or
  • stop direct marketing at any time.

You may also withdraw consent where we rely on it. Some rights do not apply to every lawful basis, and clinical or legal record-keeping duties may prevent deletion of some information.

We may need to verify your identity before acting on a request. To exercise a right, use our contact form.

9. Complaints

Please contact us first so we can investigate. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data-protection regulator. Visit ico.org.uk/make-a-complaint or call 0303 123 1113.

10. Website services and changes

Our pages may request font files from Google Fonts, which means your browser may connect to Google's servers. We do not use that connection for advertising. Please see our Cookie policy for information about essential website cookies.

We may update this notice when our services, suppliers or legal duties change. The latest version and revision date will always appear on this page.

Book your scan