Your data and privacy

Your privacy is fundamental to safe care. Every part of how we collect, store, and share your information is governed by UK GDPR, NHS standards, and our internal information governance policies.

Where your records are held

Your records are stored securely using Semble and Heidi Health, both of which are ISO 27001 certified and UK GDPR compliant. These systems are widely used across UK private healthcare.

Who can access your record

• Your clinician.
• Authorised members of the Lighthouse Pathways team, on a need-to-know basis.
• Anyone you specifically authorise, such as your GP, only with your explicit consent.

How long records are kept

Records are retained in line with national clinical retention standards, which require records to be kept for set minimum periods after the end of care. Specific retention periods vary by record type.

Your rights

You have the right to access your record, request corrections, and ask questions about how your data is used. Contact our Customer Support team to make any of these requests.