Privacy Policy
How Grace London Clinic collects, uses and protects your information. Grace Sleep is part of Grace London Clinic, so this policy covers your care with us here.
Effective 2 August 2025 · Last updated 2 August 2025
01Who we are
Grace London Clinic (“we”, “our”, “us”) provides private specialist healthcare from 76 Harley Street, London. Grace Sleep is one of our specialist services and operates under the same clinical governance and the same data protection arrangements.
We are the data controller for the information described in this policy. It applies whether you come to us through Grace Sleep, another Grace service, or our patient platform.
02What we collect
Information you give us
- Your name, email address, phone number and date of birth
- Clinical information — symptoms, history, questionnaire answers, test results and consultation notes
- Appointment details, including which clinician you are seeing and when
- Payment details, handled securely by Stripe. We do not see or store your card number.
Information from your Google account
If you connect a Google account for appointment scheduling, we access only what is needed to create and manage your appointment events and video consultation links.
We do not read, store or process any other part of your calendar, and we never access your email or wider Google account.
03How we use it
- To provide your care and manage your appointments
- To send you appointment confirmations, reminders and results
- To create video consultation links where your appointment is remote
- To take payment for the services you have had
- To meet our legal, regulatory and clinical record-keeping obligations
04Calendar and video consultations
What we do
- Create a calendar event for your appointment
- Generate a Google Meet link where the consultation is remote
- Send the calendar invitation to you and to your clinician
What we never do
- Look at calendar events unrelated to your appointments
- Store your calendar data in our systems — it is used at the moment of booking and not retained
- Access your email or any other Google account data
Turning it off
You can withdraw this access at any time in your Google Account settings, under Security, then “Third-party apps with account access”. Find Grace London Clinic and remove it. Your appointments will no longer sync automatically, and everything else on our platform continues to work.
05Storage and security
Your records are held in our secure clinical system. Information is encrypted both in transit and at rest, access is restricted to the people involved in your care and the administration of it, and we review our security arrangements regularly.
06Who we share it with
We use a small number of trusted providers to run the practice:
- Google — appointment scheduling and video consultations
- Stripe — payment processing
- SendGrid — sending email to you
We may also share information with your GP or another clinician where that is part of your care, and with insurers where you are being treated under a policy. We will disclose information if the law requires it, or where there is a serious risk to someone’s safety.
We do not sell your information, and we do not use it for advertising.
07Your rights
Under UK data protection law you can ask us to:
- Give you a copy of the information we hold about you
- Correct anything that is wrong or incomplete
- Delete information, where we are not required to keep it
- Restrict or object to how we use it
- Disconnect your calendar integration
Email info@gracelondon.clinic and we will respond within one month.
Clinical records are an exception to deletion. We are required to retain them for a set period, so we cannot erase them on request even after you stop being a patient.
08How long we keep it
Clinical records are retained for the period required by healthcare regulation. Account and platform data is kept until you ask us to close your account. Calendar data is not retained at all.
09Children
Our services are for adults. You must be 18 or over to become a patient, and we do not knowingly collect information about anyone under 18. If you believe we hold information about a child, contact us and we will remove it.
10Data outside the UK
Some of our providers process data outside the UK. Where that happens we rely on approved safeguards, so your information carries the same protection it has here.
11Changes to this policy
We update this policy from time to time. The date at the top always shows the current version, and we will tell you by email if a change materially affects you.
12Contact and complaints
If you have a question about this policy, or about how we handle your information, please get in touch.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Get in touch
Grace London Clinic
- info@gracelondon.clinic
- Phone
- 020 3355 6701
- Address
- 76 Harley Street, London W1G 7HH