Last Updated: 25th Feb 2021

Customer/user data protection and security is very important to us. This Privacy Policy lets you know what happens to any personal data that you provide to us, or any that we may collect from you.

This policy applies only to personal information processed by or on behalf of SF Screening and Vaccination Service LTD. This policy is in addition to our privacy policy at Woodhouse Medical Practice, which is available at:-

Where our website contains links to other sites, we have no influence on whether they comply with the data protection regulations. You should check their own privacy policies before providing them with personal information.

We may collect information from you when you visit our website, apply for a service, contact us by telephone or email or receive a communication from us relating to your service. If you are a business customer, this policy applies to the information you provide to us about individuals within your business

(for example directors), or information about you as a sole trader or partnership.


Changes to this Policy

We may change this policy from time to time by updating this page in order to reflect changes in the law and/or our privacy practices. We will update the date at the top of this policy accordingly. We encourage you to check this policy for changes when you revisit the website.


About us and how to contact us

We are SF Screening and Vaccination Service Limited. You can contact us at [email protected]


Our address is:

SF Screening and Vaccination Service Limited
Woodhouse Medical Practice
Woodhouse Health Centre
Cambridge Road


If you have a specific question about our policy or how we use your personal information, you should contact us at the above address or email address.

Our data protection controller is Nazia Mohammed. You can contact her at [email protected]


Cookies Policy

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Below are explanations of the cookies we use and why:

Google Analytics


This cookie is used to determine unique visitors to the site, and is written upon your first visit to this site from your web browser. The cookie is updated with each page view, and expires 2 years from being set or updated.


This cookie is used to establish the length of your visit to the site. The cookie is updated with each page view, and expires 30 minutes from being set or updated.


This cookie stores the type of referral used by you to reach your site, whether via a direct method, a referring link, a website search, or a campaign such as an ad or an email link. It is used to calculate search engine traffic, ad campaigns and page navigation within the site. The cookie is updated with each page view, and expires 6 months from being set or updated.


This cookie may be set from some pages which are used to track file downloads, or which are used in advertising campaigns. The cookie is updated with each page view, and expires 2 years from being set or updated.

Further Information




WordPress cookie for a logged in user.

Duration: session


WordPress cookie for a logged in user.

Duration: session


WordPress cookie for a logged in user.

Duration: session


WordPress test cookie.

Duration: session


WordPress also sets a few wp-settings-[UID] cookies. The number on the end is your individual user ID from the users database table. This is used to customize your view of admin interface, and possibly also the main site interface.

Duration: 1 year


WordPress also sets a few wp-settings-{time}-[UID] cookies. The number on the end is your individual user ID from the users database table. This is used to customize your view of admin interface, and possibly also the main site interface.

Duration: 1 year


Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.


What personal information do we collect, and how?

If you make an enquiry or appointment on the telephone via Woodhouse Medical Practice or via email, we will collect the information you provide to us. We may monitor and record telephone and written correspondence with you to train our staff and monitor our services.

When you attend an appointment, we will collect further information from you, which will be processed in accordance with this policy, and, to the extent the information includes information about your health, such data shall be processed as is necessary for the purposes of health or social care.

We may use your information in the following ways:


Personal information Basis for processing Purposes of processing

Date of Birth


Contact details

Financial details

Medical history

Previous vaccination details


It is necessary for the performance of our

contract with you, or to take steps for entering

into our contract with you.


To help us identify you using the NHS Spine from your name and date of birth.

To provide you with the vaccinations or treatments you have requested

To process your payment.

To contact you with appointment reminders,and to suggest follow-up appointments

To contact you regarding our services including market research and other surveys with your consent.



Contact details

Service usage details, including details of any vaccinations purchased and administered

Details of contact with us

Web usage statistics


It is necessary to achieve our legitimate interests.

Our legitimate interests include managing our business and business processes; managing

risk; increasing our service provision; improving and changing our services and

processes and marketing to you.


To analyse your account history and improve our services.

To help run (and contact you about improving the way we run) any accounts, services or


To manage our risks and improve our business


To help train our staff.

To market to you by post or telephone.

To market to you by email or other electronic means

To create statistics, analyse customer information, create profiles and create marketing opportunities (including using

information about what you buy from us and how you pay for it, for example, the vaccinations you have had and any further immunisations which may be required) and to feed into our quality improvement programme

via audits

To provide anonymised sales statistics to our suppliers and manufacturers of vaccinations to

help improve their services or for safety reasons


Contact details

Financial details

Service usage details, including details of any vaccinations and blood tests purchased or administered

COVID-19 Result

Details of contact with us


It is necessary for us to comply with a legal obligation or to protect the vital interests of you or another individual including public safety.


To provide information to your GP about vaccinations or test results which you have been given.

To make data available to our regulators and other supervisory bodies, including the Care Quality Commission, National Travel Heath Network Centre, Public Health England, Laboratories that process the tests and NHS England.

To manage any batch or product recalls.

To respect your rights under data protection or other legislation.



Contact details

Service usage details, including details of any vaccinations purchased or administered


You have given us your consent


To market to you by email or other electronic means, including sending reminders of potential follow-up appointments.




For each new patient, a consultation form is completed. This is because we are unable to provide and safely manage the service without this information.

Unless you ask us not to, we may send you reminders when your current vaccine protection runs out or when you are due for further tests, vaccinations or examinations. If you do not wish to receive such reminders, please email us at [email protected]


Aggregated information

We may convert your personal information into anonymous data and use it for research and analysis, and also provide it to our suppliers for research and analysis purposes. Anonymised aggregated personal information does not personally identify you.


Who do we share personal information with?

We may also share your information:



Controlling your personal information

You may withdraw your consent to receiving marketing at any time by emailing [email protected]

It is important to us that you are in control of your own information. As a result, we offer the following controls:

  1. You may request access to or copies of the personal information that we hold about you. If you would like to exercise this right, please contact us at [email protected] or the address above
  2. If you believe that any information we have about you is incorrect or incomplete, please contact us at [email protected] as soon as possible.

We will take steps to seek to correct or update any information if we are satisfied that the information we hold is inaccurate. You may request that we restrict our processing of your information.

  1. You may request that your personal information be deleted, where it is no longer necessary for the purposes for which it is being processed and provided there is no other lawful basis for which we may continue to process such information
  2. If we are processing your personal information to meet our legitimate interests (as set out above), you may object to the processing of your personal information by us. If we are unable to demonstrate our legitimate grounds for that processing, we will no longer process your personal information for those purposes
  3. If you have objected to our processing as set out above
  4. If we are processing your personal information automatically for the purposes of performing our contract with you, you may have the right to request that the personal information we hold about you be transferred to a third party data controller
  5. You may also request that we restrict the processing of your data to that to which you have consented or for the establishment, exercise or defence of legal claims or the protection of the rights of another person, whilst we verify your data as set out in point 2 above; pending verification of our legitimate grounds as set out in point 4 above; or if the processing is unlawful or no longer necessary, but you wish us to retain your data for the purposes of establishing, exercising or defending legal claims.


Please contact us if you have any concern about how your personal information is processed at [email protected] and we will try to resolve your concerns. However, if you consider that we are in breach of our obligations under data protection laws, you may lodge a complaint with the Information

Commissioner‘s Office at


Retention of Personal Information

If you are a customer, we will retain your personal information for as long as is appropriate, bearing in mind the treatment you have received, and in accordance with guidance produced by the NHS on records management.

If you are not a customer, we may retain your personal information for 8 years after you provide it to us.

In certain circumstances, we may be required to retain your personal information for longer, where such retention is required by law or record keeping requirements, including managing our relationship with you or defending any claims.