Effective Date: 14th June 2026
Last Updated: 30th July 2026

Privacy Notice

Dr Young is committed to protecting your privacy and ensuring that your personal information is handled fairly, securely and transparently.

This Privacy Notice explains how your personal information is collected, used and protected when you:

·      visit this website;

·      contact Dr Young’s private practice;

·      book an appointment; or

·      receive treatment as a private patient.

We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the common law duty of confidentiality and applicable healthcare legislation.

Who We Are

Dr Young (“we”, “us”, “our”)  is an independent Consultant Ophthalmic Surgeon providing private ophthalmic consultations and treatment at Ross Hall Clinic Braehead, Glasgow.

For the purposes of UK GDPR, Dr Young is the Data Controller for the personal information processed in connection with her private medical practice.

Some aspects of your care are provided by Circle Health Group, which operates Ross Hall Clinic Braehead. Circle Health Group has its own Privacy Notice explaining how it processes your personal information in relation to the hospital facilities and services it provides.

Contact Details

Dr Su L Young
Consultant Ophthalmic Surge

Consulting Rooms: Ross Hall Clinic Braehead, Kings Inch Pl, Renfrew PA4 8WF.

Email: drsuyoung@gmail.com

Personal Information We Collect

Depending on your interaction with the practice, we may collect:

Personal Details

·      Name

·      Date of birth

·      Postal address

·      Email address

·      Telephone number

·      NHS number (where applicable)

·      Next of kin details

·      Emergency contact details

Medical Information

As a healthcare provider we process special category personal data relating to your health, including:

·      Medical history

·      Ophthalmic history

·      Previous operations

·      Test results

·      Eye scans and imaging

·      Diagnoses

·      Treatment plans

·      Medication history

·      Allergies

·      Clinical correspondence

·      Surgical records

·      Follow-up information

Administrative Information

We may also process:

·      GP details

·      Referring optometrist or consultant details

·      Private medical insurance information

·      Self-pay billing information

·      Appointment history

·      Correspondence relating to your care

How We Collect Your Information

Information may be collected:

·      directly from you;

·      when you complete website enquiry forms;

·      when you telephone or email the practice;

·      when you book appointments;

·      during consultations;

·      from questionnaires you complete before treatment.

We may also receive information from:

·      your GP;

·      your optometrist;

·      NHS hospitals;

·      other consultants involved in your care;

·      Circle Health Group;

·      diagnostic providers;

·      your private medical insurer (where applicable).

How We Use Your Information

We process your personal information to:

·      assess your eye health;

·      diagnose eye conditions;

·      provide medical treatment;

·      arrange surgery;

·      maintain accurate clinical records;

·      communicate with healthcare professionals involved in your care;

·      arrange appointments;

·      send appointment confirmations and reminders;

·      respond to enquiries;

·      administer billing and insurance claims;

·      meet professional, legal and regulatory obligations;

·      improve the quality and safety of our services through clinical audit where appropriate.

Lawful Basis for Processing

Under UK GDPR we process your information because it is necessary:

·      for the provision of healthcare under Article 9(2)(h);

·      for the performance of our contract with you;

·      to comply with legal obligations;

·      for legitimate interests relating to the safe and effective running of the practice.

Where consent is required, such as for optional marketing communications, you may withdraw your consent at any time.

Medical Records and Appointment Systems

Dr Young’s private practice uses secure electronic systems provided by Circle Health Group for managing appointments and maintaining clinical records relating to your treatment at Ross Hall Clinic Braehead.

These systems are used to ensure continuity of care, secure record keeping and efficient administration of your appointments and treatment.

Access to your information is limited to authorised healthcare professionals and administrative staff who require it to provide your care or support the administration of your treatment.

Sharing Your Information

Your information may be shared where necessary with:

·      your GP;

·      referring optometrist or consultant;

·      Circle Health Group staff involved in your care;

·      Ross Hall Clinic Braehead clinical teams;

·      anaesthetists and other clinicians involved in your treatment;

·      diagnostic imaging providers;

·      pathology laboratories;

·      your private medical insurer;

·      professional advisers;

·      regulatory authorities where required by law.

Information is only shared where it is necessary for your care, required by law or otherwise permitted under UK data protection legislation.

Data Security

We take appropriate technical and organisational measures to protect your personal information.

These include:

·      secure electronic medical records;

·      encrypted systems where appropriate;

·      password-protected devices;

·      restricted user access;

·      staff confidentiality obligations;

·      secure destruction of confidential information;

·      regular security monitoring and software updates.

International Transfers

Your personal information is normally stored within the United Kingdom.

If any information is transferred outside the UK, appropriate safeguards will be implemented in accordance with UK GDPR.

Retention of Records

Medical records are retained in accordance with applicable legal requirements, NHS Records Management guidance where relevant, professional guidance issued by the General Medical Council and other applicable regulatory requirements.

Records are retained only for as long as necessary and are securely destroyed or anonymised when no longer required.

Your Rights

You have the right to:

·      request access to your personal information;

·      request correction of inaccurate information;

·      request restriction of processing in certain circumstances;

·      object to processing where applicable;

·      request erasure where legally permitted;

·      request transfer of information where applicable;

·      complain if you believe your information has been handled unlawfully.

Some rights are subject to exemptions where healthcare legislation requires records to be retained.

Website Contact Forms

If you contact Dr Young through this website, we will use the information you provide to respond to your enquiry and, where appropriate, arrange an appointment.

Please avoid including detailed confidential medical information unless requested.

Cookies and Website Analytics

This website may use cookies to improve your browsing experience and understand how visitors use the site.

Where analytics cookies are used, they will only be placed on your device where required by law and with your consent.

You can manage cookies through your browser settings.

Marketing

We will only send marketing communications where you have expressly agreed to receive them or where another lawful basis applies.

You may withdraw your consent at any time.

Confidentiality

Dr Young owes all patients a professional duty of confidentiality.

Your information will not be disclosed without your knowledge unless:

·      it is necessary for your healthcare;

·      required by law;

·      there is an overriding public interest;

·      another lawful basis under UK GDPR applies.

Children’s Information

Where treatment is provided to patients under 18 years of age, personal information may also be collected from parents or individuals with parental responsibility in accordance with applicable law.

Complaints

If you have concerns about how your personal information has been handled, please contact Dr Young in the first instance.

If you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113

Website: www.ico.org.uk

Changes to this Privacy Notice

This Privacy Notice may be updated from time to time to reflect changes in legislation or the way the practice operates.

The current version will always be available on this website.