Privacy Policy

How Grace London Clinic collects, uses and protects your information. Grace Sleep is part of Grace London Clinic, so this policy covers your care with us here.

Effective 2 August 2025  ·  Last updated 2 August 2025

01Who we are

Grace London Clinic (“we”, “our”, “us”) provides private specialist healthcare from 76 Harley Street, London. Grace Sleep is one of our specialist services and operates under the same clinical governance and the same data protection arrangements.

We are the data controller for the information described in this policy. It applies whether you come to us through Grace Sleep, another Grace service, or our patient platform.

02What we collect

Information you give us

  • Your name, email address, phone number and date of birth
  • Clinical information — symptoms, history, questionnaire answers, test results and consultation notes
  • Appointment details, including which clinician you are seeing and when
  • Payment details, handled securely by Stripe. We do not see or store your card number.

Information from your Google account

If you connect a Google account for appointment scheduling, we access only what is needed to create and manage your appointment events and video consultation links.

We do not read, store or process any other part of your calendar, and we never access your email or wider Google account.

03How we use it

  • To provide your care and manage your appointments
  • To send you appointment confirmations, reminders and results
  • To create video consultation links where your appointment is remote
  • To take payment for the services you have had
  • To meet our legal, regulatory and clinical record-keeping obligations

04Calendar and video consultations

What we do

  • Create a calendar event for your appointment
  • Generate a Google Meet link where the consultation is remote
  • Send the calendar invitation to you and to your clinician

What we never do

  • Look at calendar events unrelated to your appointments
  • Store your calendar data in our systems — it is used at the moment of booking and not retained
  • Access your email or any other Google account data

Turning it off

You can withdraw this access at any time in your Google Account settings, under Security, then “Third-party apps with account access”. Find Grace London Clinic and remove it. Your appointments will no longer sync automatically, and everything else on our platform continues to work.

05Storage and security

Your records are held in our secure clinical system. Information is encrypted both in transit and at rest, access is restricted to the people involved in your care and the administration of it, and we review our security arrangements regularly.

06Who we share it with

We use a small number of trusted providers to run the practice:

  • Google — appointment scheduling and video consultations
  • Stripe — payment processing
  • SendGrid — sending email to you

We may also share information with your GP or another clinician where that is part of your care, and with insurers where you are being treated under a policy. We will disclose information if the law requires it, or where there is a serious risk to someone’s safety.

We do not sell your information, and we do not use it for advertising.

07Your rights

Under UK data protection law you can ask us to:

  • Give you a copy of the information we hold about you
  • Correct anything that is wrong or incomplete
  • Delete information, where we are not required to keep it
  • Restrict or object to how we use it
  • Disconnect your calendar integration

Email info@gracelondon.clinic and we will respond within one month.

Clinical records are an exception to deletion. We are required to retain them for a set period, so we cannot erase them on request even after you stop being a patient.

08How long we keep it

Clinical records are retained for the period required by healthcare regulation. Account and platform data is kept until you ask us to close your account. Calendar data is not retained at all.

09Children

Our services are for adults. You must be 18 or over to become a patient, and we do not knowingly collect information about anyone under 18. If you believe we hold information about a child, contact us and we will remove it.

10Data outside the UK

Some of our providers process data outside the UK. Where that happens we rely on approved safeguards, so your information carries the same protection it has here.

11Changes to this policy

We update this policy from time to time. The date at the top always shows the current version, and we will tell you by email if a change materially affects you.

12Contact and complaints

If you have a question about this policy, or about how we handle your information, please get in touch.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Get in touch

Grace London Clinic

Email
info@gracelondon.clinic
Phone
020 3355 6701
Address
76 Harley Street, London W1G 7HH