1. Who Are We
This privacy policy explains how RAD4U Ltd (“Heart Imaging”, “we”, “our”, “us”) collects, uses, and protects your personal data.
Company details:
RAD4U Ltd
Flat 1, Kings Court
Deer Park Close
Kingston upon Thames
KT2 7RJ
United Kingdom
We are committed to protecting your privacy and handling your data securely, in line with the UK Data Protection Act 2018 and the EU/UK General Data Protection Regulation (GDPR).
2. What Data We Collect
We may collect and process the following personal data:
Contact details – your name, email address, phone number, and enquiry details.
Medical data – imaging scans, reports, and any supporting documents you provide.
Technical data – IP address, browser type, and usage data collected through cookies or analytics.
We do not knowingly collect information from children under 16.
3. How We Use Your Data
We process your data to:
Provide imaging and reporting services.
Respond to enquiries and manage patient or clinician communications.
Improve our website performance and security.
Comply with legal and regulatory requirements.
Our lawful bases for processing under GDPR include:
Contract – when we provide services you request.
Legal obligation – when required to retain or share data with regulators.
Consent – where you actively agree (e.g., providing scans for second opinions).
Legitimate interests – to operate and improve our website securely.
4. How We Store Your Data
Your data is stored securely using encrypted systems. Access is restricted to authorised clinicians and staff.
Medical data: retained for up to 8 years (in line with NHS and GMC recommendations) unless a longer retention is legally required.
General enquiries/contact data: retained for up to 2 years.
Analytics/cookies data: retention depends on the provider (e.g., Google Analytics typically 26 months).
5. Who We Share Data With
We will never sell or share your data for marketing. We may share data with:
Consultant radiologists working under contract with us.
Hospitals or referring clinicians, with your consent.
Regulators, legal authorities, or insurers, where required by law.
Trusted service providers (e.g., IT, hosting, and analytics providers) under strict data protection agreements.
6. Cookies & Analytics
Our website may use cookies and third-party analytics (such as Google Analytics) to improve site performance and understand visitor behaviour. Cookies are small text files stored on your device.
You can control or delete cookies at any time through your browser settings. For more information, visit www.aboutcookies.org.
7. Your Rights
Under GDPR, you have the right to:
Access a copy of your personal data.
Correct inaccuracies in your data.
Request deletion of your data (“right to be forgotten”), where applicable.
Withdraw consent at any time.
Restrict or object to certain processing.
Data portability (transfer your data to another provider).
You can exercise your rights by contacting us (see Section 8).
8. Contact Us
For questions or to exercise your rights, please contact us:
info@heartimaging.co.uk
RAD4U Ltd, Flat 1, Kings Court, Deer Park Close, Kingston upon Thames, KT2 7RJ, United Kingdom
If you are unhappy with our response, you may lodge a complaint with the UK Information Commissioner’s Office (ICO): www.ico.org.uk
.