Privacy Policy

Waverley Park Medical Practice

Last updated: 12 April 2026

1. Who We Are

Waverley Park Medical Practice is an NHS medical practice based in Glasgow that also offers private minor surgery services. We are the data controller responsible for your personal data collected through this website.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Email: ggc.wpmp@nhs.scot

2. What Personal Data We Collect

We collect personal data in the following ways:

Contact Form Enquiries

When you submit an enquiry through our website contact form, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your message, which may include health-related information you choose to share

Website Analytics

We use Google Analytics and Microsoft Clarity to collect anonymised information about how visitors use our website. This may include:

• Pages visited and time spent on each page
• General geographic location (country/region level only)
• Device type and browser used
• How you arrived at our website (e.g. search engine, direct link)

This data does not identify you personally and is used solely to improve our website.

3. How We Use Your Personal Data

We use the personal data you provide through our contact form to:

• Respond to your enquiry
• Provide information about our services
• Arrange a consultation if requested

We do not use your personal data for marketing purposes, and we do not share it with third parties except where required by law.

4. Our Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

• Legitimate interests — to respond to enquiries you have initiated about our services
• Consent — for non-essential cookies and analytics (see Section 7)

Where your enquiry contains health-related information (which is special category data under UK GDPR), we rely on your explicit consent in submitting that information to us.

5. How Long We Keep Your Data

We keep your personal data only for as long as necessary to respond to your enquiry. Once we have responded, your contact form submission is deleted from our email inbox. We do not store contact form data in any database or third-party CRM system.

Analytics data collected by Google Analytics and Microsoft Clarity is retained in accordance with those platforms’ own retention policies (typically 14 months for Google Analytics).

6. Third-Party Services

We use the following third-party services on our website:

Google Analytics

Provided by Google LLC. Google Analytics uses cookies to collect anonymised usage data. Google may transfer this data to servers in the United States. For more information, see Google’s Privacy Policy at policies.google.com/privacy.

Microsoft Clarity

Provided by Microsoft Corporation. Clarity records anonymised session data including mouse movements, clicks and scrolling behaviour to help us understand how visitors interact with our website. For more information, see Microsoft’s Privacy Policy at privacy.microsoft.com.

We do not use any other third-party services that process personal data.

7. Cookies

Our website uses the following types of cookies:

Essential Cookies

These are necessary for the website to function and cannot be switched off. They do not store any personally identifiable information.

Analytics Cookies

These are set by Google Analytics and Microsoft Clarity and are only placed with your consent. They help us understand how visitors use our website so we can improve it. You can accept or decline these cookies when you first visit our website.

You can also control cookies through your browser settings at any time.

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your personal data
• Right to restrict processing — you can ask us to limit how we use your data
• Right to object — you can object to us processing your data
• Right to data portability — you can request your data in a portable format

To exercise any of these rights, please contact us at ggc.wpmp@nhs.scot. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your personal data correctly.

9. Data Security

We take reasonable steps to protect your personal data from unauthorised access, loss or misuse. Contact form enquiries are received directly to our secure NHS email inbox. We do not store personal data on external servers or databases.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

Waverley Park Medical Practice
Email: ggc.wpmp@nhs.scot

This Privacy Policy was written in plain English in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.