Privacy Policy
This policy explains what personal and health information The Weight Loss Medics collects, how we use and protect it, and the rights you have under UK data protection law, including the UK GDPR.
Who we are
The Weight Loss Medics is the data controller for the information described in this policy. Our registered office is 25 Sandyford Place, Sauchiehall Street, Glasgow G3 7NG. You can contact us at info@theweightlossmedics.co.uk.
Our registered office is 25 Sandyford Place, Sauchiehall Street, Glasgow G3 7NG.
Our Data Protection Officer is David McGrane. You can contact him about anything in this policy, or about your rights over your information, at info@theweightlossmedics.co.uk.
The information we collect
When you enquire or book an appointment we collect basic identifying details such as your name, email address and telephone number. If you go on to become a patient, we also collect health information: your medical history, previous attempts at weight loss, measurements, current medicines, and the clinical notes made during your consultations.
Health information is a special category of personal data under the UK GDPR and we treat it with corresponding care. Our website also records limited technical information, such as which pages are visited, to help us understand how the site is used.
Why we use it, and our lawful basis
- To respond to your enquiry and arrange appointments — taking steps at your request before entering into a contract, and performing that contract once you are a patient.
- To provide your care — Article 9(2)(h) of the GDPR permits processing of health data for medical diagnosis, the provision of health care and treatment, and the management of health services, by professionals bound by a duty of confidentiality.
- To meet our legal, regulatory and professional obligations, including those of the General Medical Council and the Health and Care Professions Council.
- To send you information about our services, where you have consented. You can withdraw that consent at any time.
Who we share it with
We do not sell, rent or trade your information. We share it only where necessary: with the pharmacy you nominate when a prescription is issued; with your GP or another clinician where you have consented; with the service providers who host our systems, run our booking platform and process payments, under contracts that require them to protect your data; and where we are required to do so by law or by a regulator.
How long we keep it
Correspondence about an enquiry is kept only as long as needed to deal with it. Clinical records are kept for 7 years, in line with the periods required for healthcare records in the UK, and to meet our professional and legal obligations.
Keeping your information secure
We use encrypted systems and restrict access to those who need it to provide your care or administer our service. Video consultations take place over a secure platform. No system can be guaranteed completely secure, but we take appropriate technical and organisational measures to protect your information, and where a breach is likely to result in a risk to your rights we will notify you and the Information Commissioner’s Office as required.
Your rights
Under the UK GDPR you have the right to be informed about how your data is used, to access a copy of it, to have inaccurate data corrected, to request erasure or restriction in certain circumstances, to object to certain processing, and to data portability where it applies.
Complaints about your data
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.
Cookies and analytics
When you first visit the site you are asked to choose which cookies you allow. Only the essential ones are set unless you agree to more, and nothing in the analytics or marketing categories is set until you accept. You can change your choice at any time using the cookie button at the bottom-left of any page. The tables below list everything the site can set.
Essential — always set, because the site cannot work without them.
Analytics — only if you accept. These tell us which pages are useful so we can improve them.
Marketing — only if you accept. These let us measure our advertising.
Video — only set if you press play on a video. Our videos load nothing until you click them.
Google Tag Manager and Google Analytics are not loaded at all unless you accept the analytics or marketing categories. Until you do, nothing is requested from Google, nothing is stored on your device, and we receive no analytics about your visit.
We also use Plausible, a privacy-focused analytics service, to count visits and see which pages are read. Plausible does not use cookies and does not store anything on your device or collect anything that identifies you, so it runs whether or not you accept cookies. It gives us page counts and general trends only — never a record of an individual visitor.
Other websites
Our pages link to other websites, including our online booking provider. Once you leave our website this policy no longer applies, and we are not responsible for the privacy practices of those sites.
Changes to this policy
We review this policy periodically and will publish any changes on this page. This version was last reviewed in August 2026.
Visit our Irish site