Privacy policy.

Rebecca Gomes is the practitioner behind this private practice and acts as data controller for the personal information held about you. You can reach us at support@rebeccagomes.com.

We collect information you provide directly when you book an appointment, complete clinical paperwork, or correspond with us. This includes your name, contact details, date of birth, payment details and the clinical information needed to assess and treat you safely. We also collect limited technical data when you visit this website.

We use your information to deliver clinical care, manage your appointments, process payments, communicate with you about your treatment, meet our legal and regulatory obligations as a healthcare provider, and to maintain accurate clinical records.

We process your personal data on the legal bases of contract (delivering treatment you have booked), legal obligation (clinical record-keeping requirements), and legitimate interests (running the practice efficiently). Special category health data is processed under Article 9(2)(h) of the UK GDPR for the provision of healthcare.

We share your information only where necessary — for example, with your insurer where you have authorised it, with onward clinicians or surgeons where treatment requires referral, with our payment processor, and with HMRC or the Portuguese tax authority where required by law. We do not sell your data.

Clinical records are retained in line with the relevant professional regulator's requirements — typically eight years from your last appointment for adult patients, longer for children. Other personal data is retained only as long as needed for the purposes described above.

You have the right to access the personal data we hold about you, to ask us to correct inaccuracies, to ask us to delete data where we are not legally required to retain it, and to object to processing in certain circumstances. To exercise any of these rights, contact us at the email address above.

If you have concerns about how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or the Portuguese data protection authority CNPD (cnpd.pt).

We may update this policy from time to time. The current version will always be available at this URL with the date last updated shown below.