Privacy Policy of M H Hearingcare Ltd

M H Hearingcare Ltd is committed to protecting the privacy of all patients and website visitors. This policy explains what personal data we collect, why we collect it, and how we use it.

This document can be printed for reference by using the print command in the settings of any browser.

Registered office: M H Hearingcare Ltd, 73 Fleetwood Close, Tadworth, Surrey, KT20 5QH
Trading address: White House Health & Wellness Centre, 16 Waterloo Road, Epsom, Surrey, KT19 8EX
Owner contact email: info@mhhearingcare.co.uk
ICO Registration Number: ZA789213

Among the types of personal data that M H Hearingcare Ltd collects, by itself or through third parties, are: first name; last name; phone number; email address; services requested; and health-related information provided in the course of audiological care.

Complete details on each type of personal data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to data collection.

Personal data may be freely provided by the user, or, in the case of usage data, collected automatically when using our website. Unless specified otherwise, all data requested by M H Hearingcare Ltd is necessary to provide our services. Where we indicate that some data is not mandatory, you are free not to provide it without affecting the availability of our services.

Special category health data

As an audiology practice, M H Hearingcare Ltd processes health-related information including hearing test results, medical history relevant to audiological care, and details of services provided. This constitutes special category data under UK GDPR. The legal basis for processing this data is Article 9(2)(h), which covers processing necessary for the purposes of preventive medicine, medical diagnosis, and the provision of health care. All health data is stored securely and accessed only by Sophia Mahmoudi-Hartley and any parties directly involved in your care.

Cookies and tracking tools

Our website uses cookies and similar technologies. Cookies that are strictly necessary for the website to function are always active. Non-essential cookies — including those used for analytics — are only set with your consent. When you first visit the site, a consent banner allows you to accept or decline these cookies, and you can change or withdraw your choice at any time using the cookie preferences option. Until consent is given, no analytics or other non-essential tracking cookies are placed on your device.

Third-party data processors

Google Analytics: M H Hearingcare Ltd uses Google Analytics (GA4) to analyse website traffic and usage patterns, but only where you have given consent to statistics cookies. Google Analytics collects data about how visitors interact with the site, including pages visited, time on site, and approximate geographic region. IP addresses are anonymised by design for GA4 properties. Data is processed by Google LLC. If you decline or withdraw consent, Google Analytics is not loaded. For further details, see Google’s privacy policy.

Square: Appointment bookings are processed via Square, Inc. When booking an appointment, your name, email address and contact details are processed by Square to facilitate the booking. For further details, see Square’s privacy policy.

Doctify: Patient reviews are collected and displayed via Doctify Ltd. If you leave a review through Doctify, your data is processed in accordance with Doctify’s privacy policy.

Beyond Hearing (Online Hearing Screener): The free online hearing screening tool embedded on this website is provided by Beyond Hearing (beyondhearing.org). Any data submitted through the screener is processed by Beyond Hearing and may be shared with Sonova AG, as described in Beyond Hearing’s privacy notice which is displayed within the screener itself. M H Hearingcare Ltd does not receive or store data submitted through this tool.

Legal basis for processing

M H Hearingcare Ltd may process personal data where one of the following applies:

You have given your consent for one or more specific purposes.
Provision of data is necessary for the performance of a contract with you and/or for pre-contractual obligations.
Processing is necessary for compliance with a legal obligation to which M H Hearingcare Ltd is subject.
Processing is necessary for the purposes of the legitimate interests pursued by M H Hearingcare Ltd or by a third party.
For health data specifically, processing is necessary for the provision of health care under Article 9(2)(h) of UK GDPR.

Place of processing

Data is processed at M H Hearingcare Ltd’s registered office and trading address, and in any other places where the parties involved in the processing are located. Where data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR.

Retention period

Personal data shall be processed and stored for as long as required by the purpose for which it was collected. In particular:

Personal data collected for the performance of a contract shall be retained until the contract has been fully performed.
Health records will be retained in accordance with professional body guidance, typically a minimum of 8 years from the date of last treatment for adult patients, and until the patient’s 25th birthday (or 26th if aged 17 at the date of last treatment) for paediatric patients.
Personal data collected for legitimate interests shall be retained as long as needed to fulfil those purposes.

Once the retention period expires, personal data will be securely deleted.

Purposes of processing

Personal data is collected to allow M H Hearingcare Ltd to:

Provide audiological services and manage appointments
Respond to enquiries submitted via the contact form
Comply with legal and professional obligations
Improve our website and services through analytics, where you have consented
Protect the rights and interests of the business and its patients

Contact form: By filling in the contact form, you authorise M H Hearingcare Ltd to use your details to reply to requests for information or appointments. Personal data collected: email address; services requested; first name; last name; phone number.

Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

Withdraw consent at any time where processing is based on consent.
Object to processing where processing is carried out on a legal basis other than consent.
Access your data and obtain a copy of the personal data we hold about you.
Verify and seek rectification of inaccurate or incomplete data.
Restrict processing in certain circumstances.
Have your data deleted in certain circumstances.
Data portability, meaning the right to receive your data in a structured, commonly used format where technically feasible.
Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Any requests to exercise your rights can be directed to info@mhhearingcare.co.uk. Requests will be addressed free of charge within one month.

Legal action

Your personal data may be used for legal purposes by M H Hearingcare Ltd where required, including in court proceedings or in response to requests from public authorities.

Security

M H Hearingcare Ltd takes appropriate technical and organisational security measures to prevent unauthorised access, disclosure, modification or destruction of your personal data. Our website uses HTTPS encryption throughout.

Changes to this policy

M H Hearingcare Ltd reserves the right to update this privacy policy at any time. Users will be notified of any significant changes via this page. It is recommended to check this page periodically.

Last updated: 10 June 2026