Privacy Notice

Last updated: 10 October 2026

 

Who we are

Anglia Vein Clinic is the private practice of Mr Ioannis (John) Prionidis, PhD, FRCS, Consultant Vascular Surgeon (GMC 4407553). Mr Prionidis is the data controller for the personal information described in this notice and is registered with the Information Commissioner's Office (ICO), registration number ZA471507.

For any questions about your data, or to exercise your rights, contact us at info@avclinic.co.uk or 01245 241 340.

 

What we collect

• Contact and identity details: name, date of birth, address, phone number and email.

• Health information: referral letters, medical history, duplex ultrasound results, clinical photographs and treatment notes.

• Insurance and payment details: insurer, policy and authorisation numbers, and invoices.

• Anything you send us through the website contact form, by email or by phone.

 

Why we use it and our legal basis

We use your information to arrange and provide your consultation and treatment, to communicate with you and other clinicians involved in your care, to bill you or your insurer, and to meet our legal and professional obligations.

Under the UK GDPR, we rely on: performance of a contract with you (Article 6(1)(b)); compliance with legal obligations, such as keeping medical records (Article 6(1)(c)); and our legitimate interests in running the practice and answering enquiries (Article 6(1)(f)). Health information is processed for the purposes of medical diagnosis and treatment by a health professional bound by confidentiality (Article 9(2)(h)).

 

Whom we share it with

Only where needed for your care or to run the practice: the hospitals where you are seen (Phoenix Hospital Group, Ramsay Springfield Hospital, St Edmunds Hospital), the vascular scientist who performs your scan, your GP and other clinicians involved in your care, your insurer if you are insured, our medical secretary, and our accountants. We never sell your data or use it for marketing without your consent.

 

How long we keep it

Medical records are kept for 8 years after your last treatment, in line with the NHS Records Management Code of Practice (longer for children). Enquiries that do not lead to an appointment are deleted after 12 months.

 

Your rights

You have the right to access the information we hold about you, and to ask us to correct it, delete it, restrict or object to its use, or transfer it to you or another provider. Some rights are limited for medical records we are legally required to keep. We will respond within one month.

If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, 0303 123 1113.

 

This website and cookies

This website is hosted by Wix.com, which processes data on our behalf and may store it outside the UK under appropriate safeguards. We use cookies that are essential for the site to work and, only with your consent, analytics cookies that help us understand how the site is used. You can change your choice at any time through the cookie banner. Wix.com's own privacy policy is available at wix.com/about/privacy.