Privacy Policy

Last updated: 26 September 2026.

Who we are

Clinical & Diagnostic Services (“CDS”, “we”, “us”) provides primary care coding, document management, prescription support, ultrasound and practice support. For the purposes of UK data protection law, CDS is the organisation you should contact about this policy.

Clinical & Diagnostic Services
36 Foxland Road, Gatley, Cheadle, SK8 4QB
0161 258 0667
info@clinicaldiagnostic.co.uk
Monday to Saturday, 9:00am to 5:00pm

Health information

Much of the information we handle is confidential health information. Under UK GDPR this is special category data. It can include a patient’s name, date of birth, NHS number where it is provided, clinical correspondence, codes applied to a record, prescription-related details, ultrasound images and the written report.

We use health information only for the clinical or administrative purpose it was given to us. Access is limited to people who need it for that work. We do not use patient records for marketing.

Information we handle

• Patients. Details needed to book, carry out and report an ultrasound, and to answer a patient enquiry.
• GP practices and healthcare teams. Staff contact details, clinical correspondence, coding work using SNOMED CT and Read codes, prescription workflows, and the operational information needed for practice support.
• Website visitors. The details you type into the contact form: name, email, phone, organisation, enquiry type and message. See our Cookie Policy for information stored by the browser.
• Job applicants. The details you send when you enquire about careers.

Why we use it

• To provide a service a practice has asked us to provide, under the agreement with that practice.
• To book an ultrasound, carry out the scan and send the report.
• To reply to an enquiry, complaint or careers message.
• To meet a legal or clinical-record duty that applies to the work.
• To keep our systems secure and to understand, in general terms, how the public website is used.

Where UK GDPR requires a lawful basis, we rely on the performance of a contract, a legal obligation, or our legitimate interest in answering enquiries and running the website. For health information we rely on the provision of health care or treatment, or on the reasons set out in the agreement with the practice. We do not rely on consent for routine clinical work.

Practice services

For primary care coding, document management, prescription support and practice support, the GP practice or healthcare organisation remains responsible for the patient record. CDS handles that information under the agreement with the practice. Remote access, where a practice uses it, is through NHS-approved access software. The clinical system itself is confirmed with the practice and is not named on this website.

Ultrasound

For an ultrasound arranged with CDS, we use the information needed to confirm the appointment, carry out the scan and produce the report. Urgent reports are sent by NHS email within 24 hours. Non-urgent reports are sent within 48 hours. The patient’s registered GP explains the result. Please do not send clinical images or full medical records through the public contact form.

Who we share information with

• The patient’s registered GP or the practice that referred the patient, including by NHS email for ultrasound reports.
• People in the CDS team who need the information for the agreed piece of work.
• Suppliers who host email, telephones or the website, only so they can provide that service to us.
• A regulator, court or other body where the law requires us to disclose information.

We do not sell personal information. We aim to keep health information in the United Kingdom. If a supplier processes information outside the UK, we use a safeguard recognised by UK data protection law.

How long we keep it

We keep information for as long as the clinical or administrative purpose requires, for the period agreed with the practice, and for any longer period that UK health-record or legal duties require. Enquiry messages are kept only while we need them to respond and to keep a record of that response. We then delete or anonymise the information.

Security

Clinical correspondence, records and diagnostic information are treated as confidential. Access is limited, and primary care work that needs remote access uses arrangements described as NHS-approved access software. No method of sending information over the internet is completely secure, so please use the contact route the practice or the appointment letter gives you for clinical information.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to restrict how it is used, or to object to some uses. You can also ask for information you provided to be moved to another organisation where the law allows that. These rights have limits. Health records often have to be kept, and a request that would affect another person’s confidentiality, or the clinical record a practice is required to hold, may be refused in part.

Where the practice is responsible for the patient record, we may need to refer your request to that practice. We will explain when we do that.

Complaints

Contact us first at info@clinicaldiagnostic.co.uk or 0161 258 0667. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint. We would like the chance to put things right before you do that.

Changes

We will update this page when our services or the way we handle information change. The date at the top of the page shows when it was last updated. This policy should be read with our Terms & Conditions and Cookie Policy.