Miracle Inside Privacy Policy: 3D & 4D Baby Scans in Leeds

Privacy and Cookie Policy

Last updated: 25 July 2026

1. Introduction

Miracle Inside is committed to protecting the privacy, confidentiality and security of the personal information entrusted to us.

This Privacy and Cookie Policy explains how we collect, use, store, share and protect personal information when you:

Visit or use the Miracle Inside website;
Make, manage or attend an appointment;
Receive an ultrasound scan, blood test, phlebotomy service or related diagnostic service;
Use our online booking, enquiry or payment facilities;
Contact us by email, telephone, text message, online form or another approved communication method;
Provide feedback or submit a complaint;
Exercise your data-protection rights.

This policy applies to patients, clients, website visitors, people making bookings for someone else, accompanying persons and anyone whose personal information is processed in connection with our services.

We process personal information in accordance with applicable UK law, including:

The UK General Data Protection Regulation;
The Data Protection Act 2018;
The Privacy and Electronic Communications Regulations 2003;
The Data (Use and Access) Act 2025;
Applicable healthcare, professional-confidentiality and records-management requirements.

In this policy, references to “Miracle Inside”, “we”, “us” or “our” mean Miracle Inside UK Ltd and, where relevant to a particular blood-testing or diagnostic service, Miracle Inside Diagnostic Scan Clinic Ltd.

This policy replaces all previous privacy and cookie statements published on the Miracle Inside website.

2. Who We Are

2.1 Principal company and data controller

Organisation name: Miracle Inside UK Ltd
Company number: 09484044
ICO registration reference: ZA297163

Registered office and data-protection correspondence address:

35 Victoria Road
Brighouse
HD6 4DX
United Kingdom

Miracle Inside UK Ltd is the parent company and the principal data controller for information processed through:

The Miracle Inside website;
Online and telephone bookings;
Pregnancy and diagnostic ultrasound services;
Ultrasound reports, images, videos and clinical notes;
General clinic administration;
Complaints and incident management;
Clinical governance and regulatory compliance;
Central patient, booking and communication systems.

Miracle Inside UK Ltd is the Care Quality Commission-registered provider responsible for Miracle Inside’s regulated diagnostic imaging services.

The registered office above is used for Companies House, ICO registration and formal data-protection correspondence.

The regulated clinical service location is displayed separately on our Contact and Booking pages and on the Care Quality Commission’s public register. The inclusion of a clinical service location on those pages does not make it an additional registered office.

2.2 Sister company

Miracle Inside Diagnostic Scan Clinic Ltd
Company number: 12262930

Miracle Inside Diagnostic Scan Clinic Ltd is a related sister company involved primarily in:

Blood-test services;
Phlebotomy;
Laboratory test referrals;
Sample collection and transportation arrangements;
Laboratory administration;
Receiving and communicating laboratory reports;
Mobile phlebotomy and related diagnostic services.

Unless you are informed otherwise when booking, consenting to or paying for a service, Miracle Inside UK Ltd remains the principal data controller for information collected through the Miracle Inside website and central systems.

Where Miracle Inside Diagnostic Scan Clinic Ltd processes information on the documented instructions of Miracle Inside UK Ltd, it acts on behalf of Miracle Inside UK Ltd.

Where the sister company independently determines why and how personal information is processed, or jointly determines this with Miracle Inside UK Ltd, the responsible company or companies will be identified through the relevant booking information, consent form, invoice, laboratory documentation or service-specific privacy information.

You may send a data-protection request concerning either company to the contact details below. Miracle Inside UK Ltd will co-ordinate the response and direct the request to the appropriate company where necessary.

3. Data-Protection Contact

The named data-protection contact is:

Title: Mr
Name: Godson Johnson

Data-protection enquiries, Subject Access Requests, requests to exercise your rights and privacy complaints should be sent to:

Email: GODSON@MIRACLEINSIDE.com

Postal address:

Data Protection Contact
Miracle Inside UK Ltd
35 Victoria Road
Brighouse
HD6 4DX
United Kingdom

General service enquiries may be sent to:

Email: info@miracleinside.com

When contacting us about your information, please provide enough information to help us identify you and locate the relevant records. This may include:

Your full name;
Your date of birth;
Your current or previous contact details;
Your appointment date;
The type of scan, test or service received;
Your booking or laboratory reference, where available;
A clear description of your request.

We may ask for reasonable evidence of your identity or authority before releasing confidential information or acting on a request made on behalf of another person.

4. Personal Information We Collect

The information we collect depends on how you interact with us and which services you receive.

4.1 Identity and contact information

This may include:

Title;
First name and surname;
Previous names;
Date of birth;
Postal address;
Email address;
Telephone number;
Emergency contact information;
Details of a partner, parent, guardian, representative or accompanying person where relevant.

4.2 Booking and appointment information

This may include:

Appointment date and time;
Type of scan, blood test or other service booked;
Booking reference;
Appointment history;
Booking changes or cancellations;
Non-attendance records;
Payment status;
Appointment confirmations and reminders;
Relevant booking notes;
Communication preferences.

4.3 Pregnancy and clinical information

For pregnancy-related services, we may collect:

The first day of your last menstrual period;
Estimated due date;
Gestational age;
Details of your current pregnancy;
Previous pregnancy history;
Previous miscarriage or ectopic pregnancy history;
IVF or fertility-treatment information;
Presenting symptoms, including pain or bleeding;
Relevant medical conditions;
Current medication;
Allergies;
Height, weight or BMI where clinically relevant;
GP details;
Midwife details;
NHS maternity unit or hospital details;
Fertility clinic or referring clinician details.

For women’s health and other diagnostic services, we may collect:

Presenting symptoms;
Relevant medical and surgical history;
Menstrual and reproductive history;
Previous investigations;
Previous ultrasound or laboratory reports;
Medication and allergy information;
Referring clinician details.

4.4 Ultrasound and clinical records

Information created during or after an ultrasound appointment may include:

Ultrasound images;
Video clips or cine loops;
Measurements;
Examination observations;
Sonographer findings;
Diagnostic interpretation;
Clinical reports;
Consent documentation;
Clinical notes;
Relevant correspondence;
Referral or follow-up recommendations;
Records of information provided to you;
Records shared with another healthcare provider at your request or where otherwise legally permitted.

4.5 Blood-test and laboratory information

Where you undergo a blood test, we may collect:

The test requested;
The reason for testing;
Relevant clinical or pregnancy information;
Laboratory request forms;
Laboratory consent forms;
Sample collection date and time;
Sample type;
Sample identification information;
Courier and transportation information;
Laboratory reference numbers;
Laboratory reports;
Test results;
Quality-control or repeat-sample information;
Referring healthcare professional details;
Information required by the laboratory to process the test safely and accurately.

Certain genetic, fertility, prenatal, oncology or specialist tests may require additional clinical information and specific consent.

4.6 Payment and transaction information

This may include:

The service purchased;
The amount charged;
The payment date;
Payment method;
Invoice and receipt details;
Refund information;
Cancellation charges;
Payment disputes;
Limited fraud-prevention information.

Online and card payments are processed through authorised external payment providers.

Miracle Inside does not normally receive or retain your complete payment-card number, card-security code or full payment credentials.

4.7 Communications information

We may retain information contained in:

Emails;
Letters;
Telephone conversations;
Text messages;
Approved WhatsApp communications;
Website contact forms;
Online booking messages;
Complaint correspondence;
Feedback;
Review responses.

Telephone calls may be recorded for quality, training, security or complaint-management purposes. Where calls are recorded, appropriate notice will be provided.

4.8 Website and technical information

When you use our website, we may collect:

IP address;
Browser type and version;
Device type;
Operating system;
Referring website;
Pages visited;
Time and date of access;
Time spent on individual pages;
Website interactions;
Online-form activity;
Cookie identifiers;
General location information derived from an IP address;
Information used to identify technical or security problems.

4.9 Marketing and preference information

This may include:

Whether you agreed to receive marketing;
Your preferred communication channels;
The date and method of your consent;
Your history of subscribing or unsubscribing;
Your responses to clinic communications or campaigns.

We do not use detailed clinical findings, ultrasound reports, laboratory results or genetic information for general marketing purposes.

4.10 CCTV information

Where CCTV operates, it may record individuals entering, leaving or moving through monitored public areas.

CCTV is not used in ultrasound examination rooms, phlebotomy rooms, changing areas or other areas where patients reasonably expect complete privacy.

5. Health and Other Special Category Information

Information concerning health, pregnancy, fertility, genetics, medical conditions and diagnostic findings is classified as special category personal data.

Special category information receives additional protection under Article 9 of the UK GDPR and the Data Protection Act 2018.

5.1 Main condition for processing health information

Our principal condition for processing health information is:

Article 9(2)(h) UK GDPR — processing necessary for:

Medical diagnosis;
Preventive medicine;
Providing healthcare or treatment;
Managing healthcare services;
Diagnostic imaging;
Blood collection and related diagnostic services.

This is supported by Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018.

Processing under this condition is carried out by, or under the responsibility of, healthcare professionals and authorised staff who are subject to professional, contractual or legal duties of confidentiality.

5.2 Other special-category conditions

Depending on the circumstances, we may also rely on:

Article 9(2)(a): explicit consent, including where you specifically ask us to disclose information to a third party who is not otherwise involved in your care;
Article 9(2)(c): vital interests, where processing is necessary to protect someone’s life and the person is physically or legally unable to consent;
Article 9(2)(f): legal claims, where information is required to establish, exercise or defend a legal claim;
Article 9(2)(g): substantial public interest, where an applicable condition under Schedule 1 of the Data Protection Act 2018 is met;
Relevant safeguarding conditions where information must be used to protect a child, young person or adult at risk.

Consent is not always the lawful basis for processing clinical information.

We may need to retain and use clinical records to provide healthcare, maintain accurate records, meet legal and regulatory obligations, investigate an incident or respond to a legal claim, even where consent is subsequently withdrawn.

5.3 Safeguards applied to health information

We apply additional safeguards to health and special-category information, including:

Limiting access to authorised personnel;
Role-based system access;
Professional and contractual confidentiality requirements;
Data-protection and confidentiality training;
Secure clinical and laboratory systems;
Secure transmission methods;
Audit trails where supported by the relevant system;
Data-minimisation measures;
Collecting only information relevant to the service;
Regular review of access permissions;
Secure methods for sending reports and images;
Appropriate clinical-record retention periods;
Secure deletion or destruction;
Data Protection Impact Assessments where processing is likely to create a high risk;
Additional controls for genetic and prenatal information;
Maintaining appropriate internal policies where required by law.

6. How and Why We Use Personal Information

We must identify a lawful basis under Article 6 of the UK GDPR whenever we process personal information.

Where health or other special-category information is involved, we must also identify an appropriate Article 9 condition.

6.1 Managing bookings and appointments

We use information to:

Create and manage bookings;
Check whether a service is suitable;
Send confirmations and reminders;
Process booking amendments and cancellations;
Respond to appointment enquiries;
Record non-attendance;
Apply relevant booking terms.

Our usual Article 6 bases are:

Contract — Article 6(1)(b);
Legitimate interests — Article 6(1)(f) where necessary for effective clinic administration.

Where health information is involved, the additional condition will normally be Article 9(2)(h).

6.2 Providing ultrasound services

We use information to:

Review relevant clinical history;
Perform an ultrasound examination;
Record measurements and findings;
Prepare a diagnostic report;
Provide agreed scan images or media;
Maintain an accurate clinical record;
Recommend appropriate follow-up;
Communicate urgent or clinically significant findings where necessary.

Our usual legal bases are:

Contract — Article 6(1)(b);
Legal obligation — Article 6(1)(c), where applicable;
Article 9(2)(h) for healthcare and medical diagnosis.

6.3 Providing blood tests and phlebotomy

We use information to:

Confirm the test requested;
Assess whether the test requirements have been met;
Complete laboratory documentation;
Obtain relevant consent;
Collect and identify the sample;
Arrange secure sample transportation;
Communicate with the laboratory;
Receive, store or communicate results;
Arrange repeat testing where required.

Our usual legal bases are:

Contract — Article 6(1)(b);
Legal obligation — Article 6(1)(c), where applicable;
Article 9(2)(h) for healthcare and diagnostic services;
Article 9(2)(a) where explicit consent is specifically required.

6.4 Communicating with healthcare providers

Where appropriate, we may communicate with:

Your GP;
Your midwife;
An NHS maternity unit;
An Early Pregnancy Assessment Unit;
A hospital;
A fertility clinic;
A consultant;
A partner laboratory;
Another healthcare professional involved in your care.

Information may be shared:

At your request;
With your consent;
Where clinically necessary and legally permitted;
Where required by law;
To protect vital interests;
For safeguarding purposes;
To establish, exercise or defend legal claims.

6.5 Processing payments

We use transaction information to:

Take payment;
Issue invoices and receipts;
Process refunds;
Apply cancellation charges;
Investigate payment disputes;
Prevent or investigate fraud;
Maintain financial records.

Our legal bases may include contract, legal obligation and legitimate interests.

6.6 Responding to enquiries and complaints

We may use information to:

Respond to questions;
Investigate complaints;
Review the care or service provided;
Conduct clinical or administrative audits;
Investigate incidents;
Communicate with insurers, solicitors, regulators or professional advisers;
Establish, exercise or defend legal claims.

The legal bases may include contract, legal obligation and legitimate interests.

Health information may be processed under Article 9(2)(h) or Article 9(2)(f).

6.7 Clinical governance and regulation

Information may be processed for:

Clinical audits;
Quality assurance;
Staff supervision;
Staff training;
Incident investigations;
Complaint management;
Regulatory inspections;
Infection prevention and control;
Equipment and service audits;
Safeguarding;
Compliance with professional standards.

Where reasonably possible, anonymised or de-identified information will be used for training and service-improvement activities.

6.8 Operating and protecting our website

We may process technical information to:

Operate the website;
Maintain online booking facilities;
Prevent unauthorised access;
Detect security threats;
Correct technical problems;
Understand general website use;
Improve content and navigation;
Protect online forms and payment facilities.

Our usual bases are legitimate interests, legal obligation and consent where required for non-essential cookies.

6.9 Meeting legal and regulatory obligations

We may process information to comply with:

Care Quality Commission requirements;
Data-protection law;
Healthcare and professional standards;
Tax and accounting requirements;
Safeguarding obligations;
Court orders;
Law-enforcement requests;
Insurance requirements;
Employment law;
Other applicable legal duties.

7. Where We Obtain Information

We may obtain personal information:

Directly from you;
From someone making a booking on your behalf;
From a parent, guardian or authorised representative;
From your GP, midwife or hospital;
From a fertility clinic;
From a referring healthcare professional;
From a partner laboratory;
From a medical courier;
From a booking, payment or communication provider;
From another healthcare organisation involved in your care;
From service providers supporting our website or IT systems.

A person making a booking for someone else must have appropriate authority to provide that person’s information.

8. Who We Share Information With

We do not sell or rent personal information.

We only share information where it is necessary, proportionate and legally permitted.

Recipients may include:

Miracle Inside UK Ltd;
Miracle Inside Diagnostic Scan Clinic Ltd;
Healthcare professionals involved in your care;
GPs;
Midwives;
NHS hospitals;
Early Pregnancy Assessment Units;
Fertility clinics;
Consultants and specialists;
Partner laboratories;
Medical couriers;
Secure booking and clinical-system providers;
Payment processors;
Website hosting and IT-support providers;
Email and text-message providers;
Accountants;
Solicitors;
Insurers;
Clinical advisers;
The Care Quality Commission;
The Information Commissioner’s Office;
HM Revenue & Customs;
Courts;
The police;
Safeguarding authorities;
Other public authorities where disclosure is required or permitted by law.

Organisations processing information on our behalf are required to use it only for agreed purposes and to apply appropriate security, confidentiality and data-protection measures.

9. Blood Tests and Partner Laboratories

Miracle Inside works with external laboratories to provide blood, genetic, prenatal, fertility and other specialist tests.

When you undergo a laboratory test:

Relevant identity and clinical information will be entered on the laboratory request form;
Additional consent may be required for genetic or prenatal tests;
The sample will be identified using the information required by the laboratory;
The sample and associated documentation may be transported by a medical courier;
The laboratory will analyse the sample and produce a report;
Results may be sent to you, Miracle Inside, a referring healthcare professional or another authorised recipient.

A partner laboratory will normally act as an independent data controller for:

Receiving and processing the sample;
Conducting the laboratory analysis;
Producing the result;
Laboratory quality assurance;
Retaining laboratory records and samples;
Meeting its own regulatory and accreditation obligations.

The laboratory’s own privacy policy, consent requirements and retention procedures will apply to those activities.

The laboratory used will depend on the test selected. Its identity will be shown on, or provided with, the relevant request form, consent documentation or booking information.

10. Sharing Information at Your Request

You may ask us to send your report, images or laboratory results to another person or organisation.

Before doing so, we may require:

A written request;
Confirmation of the recipient;
Evidence of your identity;
An appropriate consent or authority form;
A secure destination email address or other secure transfer method.

We are not responsible for how an authorised recipient processes information after it has been lawfully disclosed to them.

Where possible, clinical information will be transmitted using secure electronic methods.

11. International Transfers

We aim to process and store personal information within the United Kingdom wherever reasonably possible.

Information may be processed outside the UK where:

A specialist test is carried out by an overseas laboratory;
A UK laboratory uses an overseas processing facility;
A technology, cloud or communications provider operates internationally;
You ask us to send information to an overseas fertility clinic or healthcare provider;
An overseas healthcare provider is involved in your care.

Before transferring information outside the UK, we will consider the level of protection available and apply an appropriate lawful transfer mechanism where required.

This may include:

UK adequacy regulations;
The UK International Data Transfer Agreement;
The UK Addendum to approved contractual clauses;
Appropriate contractual and organisational safeguards;
Another transfer mechanism permitted by UK data-protection law.

Information about safeguards relating to a specific transfer may be requested by contacting:

GODSON@MIRACLEINSIDE.com

12. How Long We Retain Information

We retain information only for as long as it is required for clinical, legal, regulatory, financial or operational purposes.

Records will be reviewed before destruction.

A record may be retained beyond its standard period where:

It is relevant to continuing care;
A complaint or serious incident has occurred;
Legal proceedings are ongoing or reasonably anticipated;
A regulator, insurer or legal adviser requires continued retention;
Safeguarding considerations apply;
Another legal or professional requirement applies.

12.1 Pregnancy-related clinical records

Pregnancy, maternity and associated ultrasound records will normally be retained for:

25 years

This may include:

Ultrasound reports;
Images;
Video or cine recordings;
Measurements;
Clinical notes;
Consent documents;
Appointment records;
Relevant correspondence.

The retention period will normally begin at the end of the relevant pregnancy-related episode of care.

12.2 General adult health records

Adult clinical records not covered by another specialist retention period will normally be retained for:

8 years after the end of care or the last relevant appointment

This includes:

Women’s health ultrasound records;
Diagnostic images;
Diagnostic reports;
Associated clinical notes;
Relevant consent and correspondence.

12.3 Records concerning children and young people

Where a clinical record concerns a child or young person, it will be retained for the period required by current healthcare records-management guidance.

Depending on the individual’s age when care ends, this may mean retaining the record until their 25th or 26th birthday or for another applicable minimum period.

12.4 Blood-test records

Blood-test request forms, consent records, collection records and reports held by Miracle Inside will be retained according to:

The nature of the test;
Whether it relates to pregnancy or general adult healthcare;
The relevant clinical-record retention period;
Laboratory and regulatory requirements;
Any ongoing clinical, complaint or legal need.

Partner laboratories may apply their own retention periods to samples, request forms, raw testing information and laboratory reports.

12.5 Booking and administrative records

Non-clinical booking and appointment records will normally be retained for up to:

7 years after the final appointment or transaction

12.6 Financial records

Invoices, receipts, refunds and accounting records will normally be retained for:

6 years after the end of the relevant financial year

12.7 Complaint and incident records

Complaint and incident records will normally be retained for:

7 years after closure

Records may be retained for longer where clinical, legal, regulatory, insurance or safeguarding considerations apply.

Serious incident records may require a longer retention period.

12.8 Subject Access Requests

Records relating to a completed Subject Access Request will normally be retained for:

3 years after closure, where there has been no appeal;
6 years after closure of an appeal, where an appeal or continuing dispute occurred.

12.9 Website enquiries

Website enquiries that do not become part of a booking, clinical record or complaint will normally be retained for up to:

24 months

12.10 Marketing information

Marketing contact information will be retained while you remain subscribed.

Where you opt out, we may retain a minimal suppression record so that your preference continues to be respected.

12.11 CCTV

CCTV recordings will normally be retained for no longer than:

30 days

Footage may be kept for longer where it relates to an incident, complaint, safeguarding concern, investigation, insurance matter or legal proceeding.

12.12 Secure disposal

At the end of the applicable retention period, information will be reviewed and then:

Securely deleted;
Confidentially destroyed; or
Anonymised so that it can no longer identify an individual.

The NHS Records Management Code recommends eight years for general adult health records, including scans and imaging, and identifies a 25-year retention period for maternity records. It also requires records to be reviewed before destruction.

13. How We Protect Information

We use appropriate technical and organisational measures to protect information from:

Unauthorised access;
Unlawful use;
Accidental loss;
Inappropriate disclosure;
Alteration;
Damage;
Destruction;
Cybersecurity threats.

Our measures may include:

Secure clinical-record systems;
Password controls;
Role-based access;
Multi-factor authentication where available;
Encryption during transmission;
Secure email and file-transfer methods;
Audit logging;
Access monitoring;
Locked storage for paper records;
Confidentiality agreements;
Staff training;
Secure-disposal processes;
Data-breach and incident-response procedures;
Due diligence and written agreements with service providers.

No electronic or physical system can be guaranteed to be completely secure.

Where a personal-data breach occurs, we will assess it and notify the Information Commissioner’s Office and affected individuals where required by law.

14. Marketing Communications

We may contact you about Miracle Inside services where:

You have provided valid consent;
You are an existing client and the communication concerns a similar service;
The electronic-marketing rules permit the communication;
Another lawful basis applies.

Booking a scan, test or other service does not automatically mean that you have agreed to receive all future marketing.

We will provide an appropriate opportunity to opt out where required.

We will not use detailed clinical findings, laboratory results or genetic information for general marketing.

You may stop receiving marketing communications at any time by:

Selecting the unsubscribe option in a marketing email;
Following the opt-out instructions in a marketing text;
Asking a member of our team;
Emailing GODSON@MIRACLEINSIDE.com.

Opting out of marketing will not prevent necessary service communications, including:

Appointment confirmations;
Appointment reminders;
Changes to appointments;
Safety information;
Requests for information needed to deliver a service;
Result notifications;
Responses to enquiries or complaints.

The electronic marketing soft opt-in may only be used where the applicable PECR requirements are satisfied, including offering a clear opportunity to opt out when contact details are collected and in each subsequent marketing message.

15. Cookies and Similar Technologies

15.1 What cookies are

Cookies are small text files placed on a computer, tablet, telephone or other device when a website is visited.

Cookies and similar technologies may help a website:

Operate correctly;
Remember preferences;
Maintain security;
Understand how visitors use the website;
Support bookings and payments;
Measure performance;
Deliver relevant advertising where permitted.

15.2 Types of cookies we may use

Strictly necessary cookies

These cookies are required for essential website functions, such as:

Website security;
Booking functions;
Payment processes;
Remembering privacy choices;
Maintaining a session while using the website.

These cookies may operate without consent where permitted because the requested service cannot function properly without them.

Preference cookies

These cookies may remember choices such as language, location or display preferences.

Analytics cookies

These cookies help us understand matters such as:

Which pages are visited;
How long visitors remain on the website;
How visitors navigate between pages;
Whether errors occur;
How website performance can be improved.

Marketing and advertising cookies

These cookies may be used to:

Measure advertising performance;
Limit how often an advertisement is displayed;
Provide advertising that may be more relevant;
Understand whether an advertisement resulted in a website visit or booking.

15.3 Cookie consent

Where consent is required, non-essential cookies must not be placed on your device until you have made a clear choice.

Continuing to browse the website without making a positive choice will not, by itself, be treated as consent to non-essential cookies.

You should be able to:

Accept non-essential cookies;
Reject non-essential cookies;
Select different cookie categories;
Change your preferences later.

You may also manage cookies using your browser settings. Blocking certain cookies may affect website, booking or payment functions.

ICO guidance requires consent before non-essential cookies are set and states that consent must involve a clear, informed and positive action.

15.4 Third-party cookies

Some website functions may be supplied by third parties, including:

Payment providers;
Booking platforms;
Analytics providers;
Embedded maps or videos;
Social-media services;
Advertising providers.

These providers may place their own cookies or collect technical information under their own privacy policies.

The website’s cookie-preference tool should provide further information about the cookies currently in use, including their purpose and duration.

16. CCTV

CCTV may operate in public areas for:

Patient and staff safety;
Security of the premises;
Prevention and investigation of crime;
Investigation of significant incidents.

Appropriate signs will be displayed where CCTV is operating.

Access to CCTV recordings is restricted.

Footage will only be disclosed where there is a lawful reason, such as:

A police investigation;
A safeguarding concern;
An insurance matter;
A legal proceeding;
A serious incident;
A lawful regulatory request.

17. Reviews, Feedback and Testimonials

We may invite clients to provide feedback through external platforms or review services.

Where you submit a review directly to an external platform, that platform will process your information under its own privacy policy.

Review invitations sent following an appointment will be clearly distinguished from general marketing where appropriate.

We will not publish identifiable:

Clinical details;
Ultrasound reports;
Laboratory results;
Photographs;
Scan images;
Videos;
Testimonials

without appropriate permission.

Where you withdraw permission, we will stop future use where reasonably possible. Withdrawal may not enable us to retrieve printed material already distributed or information independently published by another organisation.

18. Safeguarding

Miracle Inside has responsibilities concerning the safeguarding of:

Children;
Young people;
Adults at risk.

Where we reasonably believe that someone is at risk of abuse, neglect or serious harm, relevant information may be shared with:

A local-authority safeguarding team;
A healthcare provider;
The police;
Another appropriate safeguarding organisation.

The information disclosed will be limited to what is relevant and proportionate.

The lawful bases may include:

Legal obligation — Article 6(1)(c);
Vital interests — Article 6(1)(d);
Legitimate interests where applicable;
Article 9(2)(c);
Article 9(2)(g);
Relevant safeguarding conditions under Schedule 1 of the Data Protection Act 2018.

19. Your Data-Protection Rights

Depending on the circumstances, you may have the following rights.

19.1 Right to be informed

You have the right to receive clear information about how your personal information is collected and used.

19.2 Right of access

You may request:

Confirmation that we process your information;
A copy of your personal information;
Supplementary information concerning how it is used.

This is commonly known as a Subject Access Request.

19.3 Right to rectification

You may ask us to correct inaccurate information or complete information that is incomplete.

Clinical findings and professional opinions will not normally be removed merely because you disagree with them.

Where appropriate, a correction, clarification or statement recording your disagreement may be added without altering the original clinical entry.

19.4 Right to erasure

You may ask for your information to be deleted in certain circumstances.

This right is not absolute.

Clinical information may need to be retained for healthcare, legal, regulatory, professional, complaint, insurance or safeguarding purposes.

19.5 Right to restriction

You may ask us to restrict how information is used while an issue concerning its accuracy or lawful use is being considered.

19.6 Right to data portability

In certain circumstances, you may ask to receive information in a structured, commonly used and machine-readable format or ask for it to be transmitted to another controller.

19.7 Right to object

You may object to processing based on legitimate interests.

You may object to direct marketing at any time.

19.8 Automated decision-making rights

You have rights relating to decisions made solely through automated processing where the decision produces a legal or similarly significant effect.

Miracle Inside does not routinely make clinical decisions solely through automated processing.

19.9 Right to withdraw consent

Where processing is based on consent, you may withdraw consent at any time.

Withdrawal:

Does not affect processing carried out lawfully before withdrawal;
Does not override another lawful requirement to retain clinical information;
Does not necessarily require deletion of an accurate clinical record.

20. How to Exercise Your Rights

Requests may be made verbally or in writing. Written requests should preferably be sent to:

GODSON@MIRACLEINSIDE.com

You do not need to use a particular form or quote data-protection legislation.

We may ask for:

Evidence of identity;
Evidence that a representative is authorised to act for you;
Information needed to locate the records;
Reasonable clarification where a request is unclear or very broad.

We will carry out a reasonable and proportionate search for the information requested.

We will normally respond without undue delay and within one month after receiving the request and any information reasonably required to confirm your identity, authority or the scope of the request.

The response period may be extended by up to two further months where permitted because a request is complex or numerous.

Where an extension is required, we will explain this within the initial response period.

There is normally no fee.

A reasonable administrative fee may be charged, or a request may be refused, where permitted by law, including where a request is manifestly unfounded or excessive.

Access to health information may be limited where a lawful exemption applies, including where disclosure is likely to cause serious harm to the physical or mental health of an individual or would improperly disclose confidential information about another person.

21. Data-Protection Complaints

You may complain directly to Miracle Inside if you believe that:

Your information has been used incorrectly;
Information has been disclosed without an appropriate reason;
Information held about you is inaccurate;
We have not responded properly to a rights request;
Our handling of information may breach data-protection law.

Please send complaints to:

GODSON@MIRACLEINSIDE.com

Please include “Data Protection Complaint” in the subject line.

We will:

Record the complaint;
Investigate it appropriately;
Request further information where reasonably necessary;
Keep you informed where the investigation is prolonged;
Explain the outcome;
Explain any action taken;
Inform you of your right to complain to the Information Commissioner’s Office.

22. Complaints to the Information Commissioner’s Office

We encourage you to contact Miracle Inside first so that we have an opportunity to investigate and resolve your concern.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Information about submitting a complaint is available through the Information Commissioner’s Office website.

23. Changes to This Policy

We may update this Privacy and Cookie Policy to reflect:

Changes in data-protection law;
Changes to our services;
Changes to our company structure;
New clinical, booking or payment systems;
Changes to laboratories or service providers;
Updated regulatory guidance;
Changes to our information-governance practices.

The latest revision date will be displayed at the beginning of the policy.

Where a change is significant, we may provide additional notice through the website, booking communications or another appropriate method.

Previous versions may be requested by contacting:

GODSON@MIRACLEINSIDE.com

Legal and Contact Information

Principal company and data controller

Miracle Inside UK Ltd
Company number: 09484044
ICO registration reference: ZA297163

Miracle Inside UK Ltd is the parent company and the Care Quality Commission-registered provider responsible for Miracle Inside’s regulated diagnostic imaging services.

Related sister company

Miracle Inside Diagnostic Scan Clinic Ltd
Company number: 12262930

Miracle Inside Diagnostic Scan Clinic Ltd is involved primarily in blood-test, phlebotomy, laboratory-referral and associated diagnostic services.

Registered office and privacy correspondence address

35 Victoria Road
Brighouse
HD6 4DX
United Kingdom

Contact details

Data-protection contact: Mr Godson Johnson
Data-rights and privacy email: GODSON@MIRACLEINSIDE.com
General enquiries: info@miracleinside.com
Website: www.miracleinside.com

Miracle Inside Cookie Policy

What Are Cookies?

miracleinside.com places tiny text files called cookies onto your computer, tablet, or mobile device. This is standard practice for almost all websites.

Cookies are not harmful to your computer and are an essential part of online shopping. They allow us to give you a more efficient customer experience.

What Are Cookies Used For?

There are two main types of cookies: we call them “first-party” and “third-party” cookies.

First-party cookies are small data files that miracleinside.com uses for things such as keeping track of what you’ve put in your basket and remembering who you are when you return to our site. We don’t save personal information such as credit card details in the cookies we create.

Third-party cookies are set on behalf of miracleinside.com. The most important of these are Google and Affiliate Windows, which display text or banner adverts on our behalf on several other reputable websites. These partner cookies don’t collect personal data and would not be able to identify you as an individual customer.

On the whole, cookies are used:

For technical purposes essential to the effective operation of websites, particularly in relation to online transactions.
To enable miracleinside.com to collect anonymous information about the browsing and shopping activities of our customers for internal analysis.
To drive miracleinside.com marketing, particularly banner advertisements and text adverts.
To enable miracleinside.com to meet its contractual obligations to make payments to third parties when a product is purchased by someone who has visited our website from a site operated by those parties.

How to Manage Cookies:

If cookies aren’t enabled on your computer, it will mean that your shopping experience on our website will be limited to browsing and researching; you won’t be able to add products to your basket and buy them.

If you’d like to learn more about cookies in general and how to manage them, visit www.aboutcookies.org

WEBSITE OPERATED

WEBSITE OPERATED by Miracle Inside UK Ltd – Company Registration No. 09484044. Registered Office Address: No. 35, Victoria Road, HD6 4DX, Brighouse, West Yorkshire, United Kingdom. Contact no: 01132008760 or Email Miracle Inside. This e-mail address is protected from spambots.

Recent Posts

Recent Comments

Archives

Categories