Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, personal data is defined as: "any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."
Some categories of personal data are classified as special category data and attract a higher level of protection. This includes information relating to health, disability, and mental health. As a healthcare provider, TBC Healthcare collects and processes special category data as part of delivering clinical services and is committed to handling this data lawfully, fairly, and transparently.
This privacy notice tells you how we, TBC Healthcare, will collect and use your personal data for the purpose of providing our weight management service. It applies to all personal data collected through our website, by telephone, by SMS, and through our online forms and questionnaires.
In order for us to provide you with a weight management service, we need to collect and store personal data for correspondence purposes and detailed service provision. This includes:
We are committed to ensuring that the information we collect and use is appropriate for this purpose and does not constitute an invasion of your privacy.
When we send you online questionnaires or forms as part of your care, we use a unique system reference number (your PPS number) to identify your responses and link them securely to your patient record. This number is assigned to you when you are registered with our service and will be included in any correspondence asking you to complete a form.
You will be asked to enter this number when completing online questionnaires. This approach ensures your responses are matched to your records accurately and securely, without requiring you to enter sensitive personal information such as your full name or date of birth in an unsecured online form.
TBC Healthcare may contact you by telephone, email, SMS text message, or letter in connection with your care and appointments. We will not include sensitive health information in SMS messages. Where we use SMS to direct you to an online form or questionnaire, messages will not include personal health details. Your preferred method of contact can be discussed with your clinical team and will be recorded in your care record.
If you have a disability, long-term health condition, or additional need that affects your ability to engage with our programme, we will discuss and agree reasonable adjustments with you. Information about your disability and any adjustments made will be recorded in your clinical notes and taken into account throughout your care, including at any clinical review. This information is collected to fulfil our obligations under the Equality Act 2010 and to ensure you can access our services equitably.
We may pass your personal data to third-party service providers contracted to TBC Healthcare in the course of dealing with you, including:
Any third parties with whom we share your data are obliged to keep your details securely and to use them only to fulfil the service they provide on our behalf. When they no longer need your data to fulfil this service, they will dispose of it in line with TBC Healthcare's procedures.
If we wish to pass your sensitive personal data to a third party in any other circumstance, we will only do so once we have obtained your consent, unless we are legally required to do otherwise.
We do not sell your personal information.
TBC Healthcare will process (collect, store and use) the information you provide in a manner compatible with the UK GDPR and the Data Protection Act 2018. We will endeavour to keep your information accurate and up to date and not keep it for longer than is necessary.
TBC Healthcare is required to retain information in accordance with the law and NHS records management guidance. The legal bases we rely on to process your personal data include:
Our aim is not to be intrusive, and we undertake not to ask irrelevant or unnecessary questions. The information you provide will be subject to rigorous measures and procedures to minimise the risk of unauthorised access or disclosure. We will contact you in connection with your appointments, assessments, questionnaires, and the ongoing management of your care.
Our website uses cookies and similar tracking technologies to help us understand how visitors use the site and to improve your experience. Cookies are small text files placed on your device when you visit our website.
We use the following types of cookies:
You can control and manage cookies through your browser settings. Please note that removing or blocking cookies may affect your experience of our website.
Where we use third-party analytics tools (such as Google Analytics), data collected may be transferred to and stored on servers outside the UK. We take steps to ensure appropriate safeguards are in place for any such transfers.
You can find more information about how to manage cookies at www.aboutcookies.org
TBC Healthcare, at your request, can confirm what information we hold about you and how it is processed. You have the right to:
If TBC Healthcare does hold personal data about you, you can also request the following information:
TBC Healthcare accepts the following forms of ID when information on your personal data is requested: passport, driving licence, birth certificate, or a recent utility bill (dated within the last three months).
| UK GDPR owner contact details | |
| Contact Name: | Catherine Konzon |
| Address: | Suite 1, Hawley Manor, Hawley Road, Dartford, Kent DA1 1PX |
| Email: | Catherine.konzon@tbchealthcare.co.uk |
| Telephone: | 01322 220294 |
Read more about how and why we use your data here: https://tbchealthcare.co.uk/pdf/WebsitePrivacyNotice.pdf
Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. This notice was last updated on 27/05/2026.
