**Privacy Policy for Hilmi Health System (HHS)**
**Effective Date:** 2 September 2025

**1. Who We Are**
Hilmi Health System (HHS) (“we,” “us,” “our”) is a healthcare provider operated by HILMI HEALTH SYSTEM LTD (company number 16135907). Our registered office is at 5 Brayford Square, London, E1 0SG.
For data protection purposes, we are the ‘data controller’ of your personal information.

**2. The Type of Personal Information We Collect**
We currently collect and process the following information:
– **Identifiers:** Name, title, date of birth, gender.
– **Contact Details:** Address, email address, telephone number.
– **Financial Information:** Payment card details (processed securely by our payment provider), transaction history.
– **Special Category Data:** Detailed medical history, health information, treatment notes, diagnostic results, genetic data, and biometric data. This is classified as ‘Special Category Data’ under UK GDPR.

**3. How We Get Your Personal Information and Why**
Most of the personal information we process is provided to us directly by you for one of the following reasons:
– **To Perform Our Healthcare Contract with You:** To provide you with medical diagnosis, treatment, and ongoing care.
– **With Your Explicit Consent:** To send you marketing communications about our services (which you can opt out of at any time). For processing Special Category Data for healthcare purposes.
– **For Our Legitimate Interests:** To manage our business operations, for website security, and to improve our services.
– **To Comply with a Legal Obligation:** Such as retaining medical records as required by UK law.

**4. How We Store Your Personal Information**
– Your information is securely stored on encrypted servers within the UK.
– We have implemented strong security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way.
– We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including to satisfy any legal, accounting, or reporting requirements. Medical records are typically retained for 10 years after your last treatment, or longer for certain cases as stipulated by UK law.

**5. International Transfers of Your Data**
As part of our service, certain specialised laboratory analyses are processed by partner laboratories in the European Union (EU). We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data (as the EU has), and we ensure all our partners are bound by strict contractual terms that uphold UK GDPR standards.

**6. Your Data Protection Rights**
Under data protection law, you have rights including:
– **Your right of access** – You have the right to ask us for copies of your personal information.
– **Your right to rectification** – You have the right to ask us to rectify personal information you think is inaccurate.
– **Your right to erasure** – You have the right to ask us to erase your personal information in certain circumstances.
– **Your right to restriction of processing** – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
– **Your right to object to processing** – You have the right to object to the processing of your personal information in certain circumstances.
– **Your right to data portability** – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at **contact@hilmihealthsystem.co.uk** to make a data request.

**7. How to Complain**
If you have any concerns about our use of your personal information, you can make a complaint to us at **contact@hilmihealthsystem.co.uk**.
You can also complain to the ICO if you are unhappy with how we have used your data.
The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline number: 0303 123 1113
ICO website: [https://www.ico.org.uk](https://www.ico.org.uk)