Privacy Policy
4 Oct 2026
This notice explains how Dr Stephen Mounsey collects, uses and protects your personal information when you are a patient, or when you contact the practice through this website.
Who we are
Dr Stephen Mounsey is a Consultant Dermatologist who provides private care through Stephen Mounsey Dermatology Limited. The company is the data controller for the information in this notice. This means it decides how your information is used and is responsible for protecting it.
Dr Mounsey sees patients at Montrose London, HCA Healthcare UK and the Shard. Your clinical record is held by Stephen Mounsey Dermatology Limited wherever you are seen. The hospital or clinic you attend may also keep its own records, for example for bookings, payment or facility use, and these are covered by that organisation's own privacy notice.
Contact details
Company: Stephen Mounsey Dermatology Limited
Company number: 15483776 (registered in England and Wales)
Registered office: 124 City Road, London, EC1V 2NX
Email: PA@DrMounsey.com
Telephone: 01264 317600
If you have any questions about this notice or how your information is used, please contact us using the details above.
What information we collect
We only collect what we need to look after you, run the practice and answer your enquiries.
If you are a patient
Your name, date of birth, sex, address, telephone number and email address
Your next of kin or emergency contact, and your parent or guardian if you are under 18
Your GP's details and the details of anyone who referred you
Your medical history, current medicines, allergies and relevant social history, such as occupation
Notes from your consultations, examination findings, diagnoses and treatment plans
Clinical photographs, including dermoscopy images and full body mole mapping images
Test results, such as biopsy and histology reports, blood tests, swabs and patch test results
Letters and correspondence about your care
Your insurer, policy and authorisation details if your care is funded by insurance
Invoices and records of payment
If you contact us through the website
Your name, email address, telephone number and anything you choose to include in your message
We do not use your information for marketing, and we do not sell it to anyone.
How we use your information and our lawful bases
UK data protection law requires us to have a lawful basis for each use of your information. Because health information is special category data, we also need a separate condition for using it.
Assessing, diagnosing and treating you: contract, to provide the care you have asked for (Article 6(1)(b)), and the provision of health care (Article 9(2)(h)).
Communicating with other healthcare professionals involved in your care: contract (Article 6(1)(b)) and the provision of health care (Article 9(2)(h)).
Billing you or your insurer: contract (Article 6(1)(b)) and the management of health care services (Article 9(2)(h)).
Keeping records for the required period, and meeting regulatory, tax and legal duties: legal obligation (Article 6(1)(c)) and the provision and management of health care (Article 9(2)(h)).
Handling complaints and defending legal claims: legitimate interests (Article 6(1)(f)) and legal claims (Article 9(2)(f)).
Replying to website enquiries: legitimate interests in answering the questions you send us (Article 6(1)(f)). If you include health details, we rely on Article 9(2)(h).
Protecting you or someone else in an emergency: vital interests (Articles 6(1)(d) and 9(2)(c)).
Agreeing to treatment is separate from the data protection basis above. You can still decline any part of your care, and we will always ask for your consent before sharing your information, except in the limited circumstances described under Confidentiality.
We do not make decisions about you using solely automated means.
Who we share your information with
We share your information with healthcare professionals involved in your care, with your consent. Depending on your care, this may include:
Your GP
The clinician who referred you
Laboratories that examine biopsies, blood tests and other samples
Specialists we refer you to, such as Mohs surgeons
The hospital or clinic where you are seen
If your care is funded by private medical insurance, we share with your insurer the information needed to authorise and pay for your treatment, such as appointment dates, procedure codes and, where required, your diagnosis.
We only share information without your consent in the limited circumstances set out under Confidentiality below.
Systems and suppliers
We use a small number of specialist suppliers to run the practice. They act only on our instructions, under written contracts that require them to keep your information secure and confidential.
Carebit provides practice management and the electronic patient record. It holds your contact details, clinical record, letters, appointments and billing.
Canfield IntelliStudio provides full body photography for mole mapping. It holds clinical photographs.
Patients aged 13 to 17
Dr Mounsey sees young people from the age of 13. Their information is handled in the same way as an adult's, with some additional points.
We record the details of a parent or guardian, who is usually involved in appointments and in agreeing to treatment.
A young person who understands their care can usually make requests about their own information, including asking for a copy of it.
A parent or guardian can ask for a young person's information on their behalf. Where the young person is able to understand the request, we will normally ask for their agreement first.
We will always act in the young person's best interests, which may include sharing information to protect them from harm (see Confidentiality below).
How long we keep your information
We keep clinical records for the minimum periods recommended in the Records Management Code of Practice for Health and Social Care 2021, and other information only for as long as we need it.
Adult clinical records, including photographs, images and test results: 8 years after your last appointment.
Clinical records for patients under 18 when last seen: until your 25th birthday, or your 26th birthday if you were 17 when your care ended.
Invoices, payment and insurance claim records: 6 years after the end of the financial year they relate to.
Complaints: 10 years after the complaint is closed.
Website enquiries from people who do not become patients: 12 months after our last reply.
At the end of each period, records are reviewed and then securely destroyed, unless there is a specific reason to keep them longer, such as an ongoing complaint or legal claim.
Keeping your information secure
Your information is held in secure electronic systems with access limited to Dr Mounsey and practice staff who need it for their work. Everyone with access is bound by a duty of confidentiality.
Confidentiality
Dr Mounsey is bound by a common law duty of confidentiality and by the General Medical Council's guidance on confidentiality. We will only share your information without your consent where:
the law requires it, for example a court order
there is a risk of serious harm to you or to others, including safeguarding concerns about a child or vulnerable adult
it is needed to protect your life in an emergency and you are unable to agree
it is otherwise permitted under The Health Service (Control of Patient Information) Regulations 2002
Your rights
You have the following rights over your personal information:
Access: to ask for a copy of the information we hold about you
Rectification: to ask us to correct information you think is inaccurate or incomplete
Erasure: to ask us to delete your information. Because we must keep clinical records for the periods above, we may not be able to delete them before then.
Restriction: to ask us to limit how we use your information
Objection: to object to uses of your information based on our legitimate interests
Portability: to ask us to transfer information you gave us to you or to another organisation
To make a request, contact us using the details at the top of this notice. There is usually no charge, and we will respond within one month. We may ask you to confirm your identity first.
How to complain
If you are unhappy with how we have used your information, please contact us first so we can try to put it right.
You also have the right to complain to the Information Commissioner's Office:
Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Helpline: 0303 123 1113 Website: ico.org.uk/make-a-complaint
Changes to this notice
We review this notice regularly and will post any changes on this page.
Last updated: October 2026