Privacy Statement

Last Updated: January 2026

Spark Medical Limited (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Statement explains how we collect, use, store, disclose, and protect your personal information when you visit our website, access our services, or interact with our team.

1. Who We Are

Spark Medical Limited is a provider of clinical, patient transport, and event medical services. We act as a Data Controller for the personal information you provide to us.

If you have any questions about this Privacy Statement, you can contact us at:

Email: [Insert contact email]
Address: [Insert registered office address]

2. Information We Collect

We may collect the following categories of personal data:

2.1 Information You Provide Directly

• Name
• Contact details (email, phone number, address)
• Details submitted via online forms
• Employment-related information (for applicants)

2.2 Information Collected Automatically

• IP address
• Browser type
• Device information
• Website usage statistics via cookies (see our Cookie Policy)

2.3 Operational or Clinical Data

When you use our services, we may process:

• Medical information
• Incident or patient care reports
• Service delivery notes

This data is handled in accordance with NHS, CQC, and GDPR requirements.

3. Use of CCTV for Patient and Crew Safety

Spark Medical Limited uses Closed Circuit Television (CCTV) in certain operational environments, clinical areas, and vehicles for the purpose of patient, staff, and crew safety, protection, and the prevention or detection of incidents.

3.1 How We Use CCTV

• Monitoring the safety of patients and staff
• Supporting the investigation of formal incidents or concerns
• Preventing crime and maintaining the security of vehicles, premises, and equipment

CCTV recordings are not used for staff performance monitoring, except where a safety-related or formally raised concern requires an investigation.

3.2 Access to CCTV Footage

Only authorised personnel may access CCTV recordings. These individuals are trained and permitted to do so solely for the purpose of investigating a formally raised incident or concern.

All access is logged and regularly audited.

3.3 Requesting CCTV Footage

CCTV footage is only disclosed:

• When legally required (e.g., police investigation)
• When necessary to investigate a formally submitted incident
• In response to a valid Data Subject Access Request, where no exemptions apply

3.4 How to Raise a Concern

To formally raise an incident, concern, or complaint related to CCTV or any aspect of our service, please refer to the “Experience” section of our website, where instructions and contact details for submitting concerns are provided.

4. How We Use Your Information

We process your personal data for the following purposes:

• Providing medical or transport services
• Responding to enquiries
• Meeting legal and regulatory obligations
• Managing contracts or service agreements
• Maintaining safety and security, including CCTV
• Improving our website and services

5. Legal Basis for Processing

Depending on the context, we process data under:

• Consent (e.g., when you submit a contact form)
• Contractual necessity (e.g., providing booked services)
• Legal obligations (e.g., CQC or NHS compliance)
• Vital interests (e.g., emergency care)
• Legitimate interests (e.g., CCTV for safety and security)
• Public task (for certain regulated healthcare functions)

6. Data Sharing

We may share your data with:

• NHS organisations or healthcare partners
• Law enforcement (where legally required)
• Regulatory bodies (e.g., CQC, ICO)
• Service providers acting on our behalf (e.g., IT or secure storage systems)

We do not sell personal data to third parties.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purpose it was collected for, including:

• Clinical records: held in line with NHS retention schedules
• Incident reports: retained to meet legal and regulatory expectations
• CCTV: typically retained for 30 days, unless flagged as part of a formal investigation

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion (where applicable)
• Restrict or object to processing
• Request data portability

To exercise your rights, contact [Insert DPO or general privacy email].

9. Cookies

Our website uses cookies to improve functionality and analytics. For details, please see our separate Cookie Policy.

10. Changes to This Privacy Statement

We may update this Privacy Statement periodically. The latest version will always be available on our website.