[CLIENT TO PROVIDE — LEGAL TO APPROVE] Structural placeholder. This is a healthcare provider processing special-category (health) data; the final policy must be drafted or approved by the data controller (Xtremity MRI Scan Ltd) / their DPO and reflect UK GDPR obligations.
[Data controller identity and contact details.]
[Personal, contact, booking, and health/special-category data; payment data (via Stripe).]
[Contract, consent, legitimate interests, and Article 9 conditions for health data.]
[See the Cookie Policy; analytics/marketing set only with consent.]
[Radiologists, payment (Stripe), email/SMS, hosting.]
[How long records are kept (e.g. medical record retention guidelines).]
[Access, rectification, erasure, restriction, portability, objection; how to exercise them.]
[Technical and organisational measures.]
[Right to complain to the ICO.]
[DPO / privacy contact details.]