Privacy Policy

This privacy policy is for anyone who uses the services provided by MyMSK clinic. It explains how we obtain your information, why we need it and how we keep it secure. For anything not addressed in this policy you may contact us at admin@mymskclinic.co.uk

Our contact details

home and location logo in red colour

MyMSK Clinic Burnley

Address: 1A Parker Street, Burnley BB11 1AU
Phone Number: 0333 772 9655
E-mail: admin@mymskclinic.co.uk

home and location logo in red colour

MyMSK Clinic Manchester

Address: Sevendale House, 5-7 Dale St, Manchester M1 1JA
Phone Number: 0333 772 9655
E-mail: admin@mymskclinic.co.uk

The type of personal information we collect

We collect and process information including but not limited to:
Children’s Data

My MSK Clinic provides services only to adults aged 18 and over. We do not knowingly collect or process personal information relating to anyone under the age of 18.

Why we collect your personal information

Most of the personal information we process is provided to us directly by you. Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

Who is responsible for keeping my personal data safe at MyMSK Clinic?

Dr Amir Akhtar is our Data Protection Officer and is responsible for keeping your personal information secure and confidential. He can be reached at:

Dr Amir Akhtar
MyMSK Clinic 1A Parker Street
Burnley BB11 1AU
0333 772 9655
admin@mymskclinic.co.uk

Change of Details

It is of utmost importance that you let the Clinic know in case of any changes that need to be made to your personal information (e.g. a change in address) or if you find any incorrect piece of information in the data that we have collected, that may need amending (e.g. your phone number, date of birth). You have a responsibility to inform us of any changes so our records are accurate and up to date

How we collect your personal information

What are Cookies?

Cookies are small text files placed on your device to help our website function and to improve your experience.

We use:

  • Essential cookies – required for the website to work properly (these do not require consent).

  • Analytics and performance cookies – help us understand how our site is used. 

  • Functional cookies – remember your preferences, such as language or location settings.

MyMSK Clinic uses two types of cookies:

Maintaining your confidentiality

The clinic has a legal obligation to maintain your confidentiality and is committed in doing so. All the staff is trained in keeping your personal data secure and confidential in line with the guidelines set out by the GDPR

How we store your personal information

Your paper medical records are securely stored in locked filing drawers. Electronic files are saved in password-protected computers.
Your information will only be passed on if ever a genuine need for it arises. The Clinic will never disclose your information to any third party without your permission, unless there are exceptional circumstances; e.g. if it’s a life or death situation, or where it is our legal obligation to pass on any information as part of our duty of care.
MyMSK Clinic will follow standard medical guidance on the length of retention of medical records. In most cases, this means that your records be retained for 8 years after you last saw us. It will then be disposed of in a safe manner.
Records may be kept for longer provided that there is good reason to extend the retention period (e.g. if your medical condition is the subject of a protracted legal claim). In the case of child patients, medical records are normally kept until the child reaches the age of 25 or 26 years.

Sharing Your Information with Third Parties

We may share your personal data with trusted third parties who help us deliver our services, such as:

  • Secure payment processors

  • IT service providers and cloud storage platforms

  • Laboratories or diagnostic imaging providers (for clinical purposes)

  • Other healthcare professionals involved in your care 

All third parties are bound by strict data protection agreements and may only use your data for the specific purpose we have instructed.
We do not transfer your data outside the UK unless adequate safeguards are in place that comply with current UK data protection laws.

Your data protection rights

Under data protection law, you have rights including:
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at admin@mymskclinic.co.uk if you wish to make a request.

Automated Decision-Making and Human Review

We do not currently make any decisions about you solely by automated means that have legal or similarly significant effects. All clinical and administrative decisions are reviewed by a clinician or trained staff member before any action is taken.

If this ever changes, you will be informed, and you will have the right to request human review of any automated decision, express your point of view, and contest the decision in accordance with the Data Protection and Digital Information Act (DPDI Act) and the Data Use and Accountability Amendments (DUAA).

Complaints

If you have any concerns about how we handle your personal information, please contact us first at admin@mymskclinic.co.uk. We will acknowledge your complaint within 3 working days (unless a full reply can be sent within 5 days), keep you updated throughout our review, and provide a written outcome once your concern has been resolved.

If you remain dissatisfied, you may escalate your complaint to the Information Commissioner’s Office (ICO) using the following details:

home and location logo in red colour

The ICO’s address

Information Commissioner’s Office Wycliffe House, Water Lane, Wilmslow. Cheshire, SK9 5AF

customer care girl logo

Helpline number

0303 123 1113

Policy Review
This Privacy Policy is reviewed at least annually or whenever significant changes occur in legislation or in how we process personal data. The last review date was October 2025 in line with the Data Protection and Digital Information Act (DPDI Act) and the Data Use and Accountability Amendments (DUAA).

For a copy of our full complaints or Data Protection and Information Governance Policy please contact us at admin@mymskclinic.co.uk.

Scroll to Top