We offer a FREE 15-minute consultation to see if TMS is the right treatment for you.
Make an appointment
Phone : 07376 079877
Email : info@alexmed.co.uk
Privacy Policy
Last updated: 14-05-2026
Alexmed ("we", "our", "us") is committed to protecting your privacy. This privacy notice explains how we collect, use, store, and protect personal information you give us through this website and during your interaction with our clinic.
This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Alexmed is a private psychiatric clinic operating from:
Calderbank Medical Chambers, 599 Wilmslow Road, Didsbury, Manchester M20 3QD
The clinic is led by Dr Micheal Kurkar, Consultant Psychiatrist (GMC #6061661).
We are the data controller for any personal information collected through this website or during clinical care.
ICO registration: [REGISTRATION NUMBER — register at ico.org.uk if you do not already have one]
2. Contact
For any questions about this notice or to exercise any of your data protection rights:
- Email: info@alexmed.co.uk
- Phone: +44 7376 079877
- Post: Data Protection, Alexmed, Calderbank Medical Chambers, 599 Wilmslow Road, Didsbury, Manchester M20 3QD
3. What data we collect
When you use this website or contact us, we may collect:
Information you give us directly:
- Your name, email address, phone number, and date of birth (via the enquiry form)
- The reason for your enquiry, which may include information about your mental or physical health (this is "special category" data under UK GDPR)
- Any information you choose to include in the message field of the enquiry form
- Information given by phone or email when booking an appointment
Information collected automatically when you visit the site:
- IP address (truncated for analytics)
- Browser type and version, device type, operating system
- Pages visited, time spent on each page, referring website
- Cookies and similar technologies (see section 7)
We do not collect or store payment card details on this website. Any payments are taken in clinic or via a regulated third-party payment processor.
4. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) | Special category basis (Art. 9, where applicable) |
|---|---|---|
| Responding to enquiries you send through the website | Legitimate interests — responding to people who contact us | Explicit consent (you choose to send the message) |
| Booking and managing your appointment | Contract — taking steps at your request before entering a contract | Healthcare provision (Art. 9(2)(h)) |
| Providing clinical care | Contract — performance of our contract with you | Healthcare provision (Art. 9(2)(h)) |
| Sending appointment reminders | Contract / legitimate interests | Healthcare provision |
| Keeping clinical records as required by our professional and regulatory duties | Legal obligation | Healthcare provision / public interest in health |
| Improving the website (analytics) | Consent (via the cookie banner) | Not applicable |
| Responding to complaints, regulatory requests, or legal proceedings | Legal obligation / legitimate interests | As required |
We will never sell your data, and we do not use it for automated decision-making or profiling.
5. Who we share your data with
We share your personal data only where necessary and only with parties bound by appropriate confidentiality and data-protection terms.
Routine sharing:
- Your GP or referring clinician, where you have asked us to provide a report or where clinical safety requires it
- Health insurers (for example, Bupa, AXA, Vitality, Aviva), where you are claiming through insurance
- NHS services, where there is a clinical or safeguarding reason and consent has been given (or where overriding duty applies)
- Our IT and infrastructure providers, who host the website, store our records, or process bookings on our behalf
Service providers used on the website (data processors):
- Web hosting: IONOS
- Website analytics: Google LLC (Google Analytics — see section 7)
- Form submissions: FluentForms (stored within the WordPress database on our server)
- Patient reviews widget: Doctify Ltd (review content displayed; no data submitted to Doctify through this website)
- Search-engine indexing notifications: Rank Math / IndexNow
Disclosures required by law:
We may disclose personal data where we are required to by law, by a court order, or to comply with a regulatory request — for example, from the General Medical Council (GMC), the Care Quality Commission (CQC), or the Information Commissioner's Office (ICO).
Safeguarding:
Where there is a serious risk of harm to you or another person, we may need to break confidence and inform the appropriate authority. This is consistent with the GMC's Good Medical Practice (2024) and our duty of care.
6. International transfers
The data centres used by our website hosting provider and by Google Analytics may be located outside the United Kingdom, including in the European Economic Area and the United States. Where personal data is transferred outside the UK, we rely on the UK government's adequacy regulations or on the International Data Transfer Addendum (IDTA) and Standard Contractual Clauses where required.
7. Cookies and similar technologies
This website uses the following categories of cookies:
| Type | Purpose | Examples | Consent required? |
|---|---|---|---|
| Strictly necessary | Make the site work | WordPress session, cookie consent state | No |
| Performance / analytics | Anonymous traffic measurement | Google Analytics (_ga, _gid) |
Yes |
| Functional | Caching and page speed | WP Rocket cache cookies | No (caching only) |
| Embedded content | Display of the Doctify reviews widget | Doctify domain cookies (set by the third-party widget if you interact with it) | Yes |
You can change your cookie preferences at any time via the cookie banner footer link, or by clearing cookies in your browser settings.
We honour the "Do Not Track" browser signal where technically supported.
8. How long we keep your data
| Data | Retention period |
|---|---|
| Website enquiry not converted to an appointment | 12 months from last contact |
| Appointment booking / clinical records | In line with GMC guidance and the NHS Records Management Code of Practice 2021 — adult mental health records: minimum 20 years after last contact, or 8 years after death |
| Marketing consent records | For as long as consent is active + 3 years after withdrawal |
| Website analytics | Aggregated and retained for up to 26 months in Google Analytics |
| Accounting and tax records | 7 years (HMRC requirement) |
9. Your rights under UK GDPR
You have the right to:
- Be informed about how your data is used (this notice)
- Access the personal data we hold about you (Subject Access Request)
- Rectify inaccurate data
- Erasure ("right to be forgotten") — subject to the legal duty to retain clinical records
- Restrict how we process your data
- Object to processing based on legitimate interests
- Data portability for data you provided
- Withdraw consent at any time (where consent is the lawful basis)
- Not be subject to automated decision-making (we do not perform any)
To exercise any of these rights, contact us using the details in section 2. We will respond within one calendar month. There is no fee unless the request is manifestly unfounded or excessive.
Right to complain: If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
10. Security
We protect your data using appropriate technical and organisational measures, including:
- HTTPS / TLS encryption across the entire website
- Password protection and access controls on clinical records
- Up-to-date security patches on the website server
- Regular backups, stored encrypted
- Staff training in confidentiality and information governance
- A data breach response procedure (any breach involving personal data will be reported to the ICO within 72 hours where required by law)
11. Children
This website and our services are intended for adults (18+). We do not knowingly collect personal information from children through this website. If you are under 18 and have submitted information, please ask a parent or guardian to contact us so we can remove it.
12. Changes to this notice
We may update this notice from time to time. The "Last updated" date at the top of this page will change accordingly. Where changes are significant, we will notify enquirers and current patients by email.