Last updated: 26 August 2026
Dr Raquel Delgado is committed to protecting your privacy, maintaining the confidentiality of your medical information, and handling your personal data fairly, lawfully and securely.
This Privacy Policy explains how we collect, use, store and share personal information when you:
visit drraqueldelgado.com;
contact us by email, telephone, WhatsApp or through our website;
make or request an appointment;
receive medical, women's health, menopause, weight-management, preventative-health or skin-treatment services from us;
communicate with us about your care;
subscribe to our newsletter or other marketing communications; or
otherwise interact with Dr Raquel Delgado's practice.
We process personal information in accordance with applicable UK data-protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable rules relating to electronic communications and cookies.
For the purposes of data-protection law, the data controller responsible for your personal information is:
Data Controller: Dr Raquel Delgado
Website: https://drraqueldelgado.com
Email: dr@drraqueldelgado.com
Telephone / WhatsApp: +44 78797 10046
Privacy correspondence address: Bilba Clinic 57 Great Titchfield Street, Fitzrovia, London W1W 7PN
Dr Raquel Delgado is registered with the General Medical Council (GMC number 4072768).
If you have any questions about this Privacy Policy or wish to exercise your data-protection rights, please contact us using the details above.
The information we collect depends on how you interact with us.
This may include:
full name;
title;
date of birth;
age;
postal address;
email address;
telephone number;
emergency contact or next-of-kin details; and
other information required to identify or communicate with you.
When you request or receive healthcare, we may collect information concerning your physical or mental health.
This is considered special-category personal data and may include:
current and previous medical conditions;
symptoms;
medical and family history;
allergies;
medications and prescriptions;
vaccination information;
menstrual, reproductive, sexual or hormonal health information where relevant;
menopause and perimenopause information;
height, weight, body measurements and metabolic-health information;
lifestyle information relevant to your health;
investigation and blood-test results;
diagnostic information;
clinical assessments and consultation notes;
referrals and correspondence with other healthcare professionals;
treatment plans;
medication-monitoring information;
photographs or images taken for clinical purposes;
information relating to skin or aesthetic treatments;
information supplied by your NHS GP, another healthcare professional, laboratory, pharmacy or specialist where relevant to your care; and
any other health information required to provide safe and appropriate treatment.
You are not required to provide information that is not necessary for your care. However, if you do not provide information that is clinically necessary, we may be unable to provide a particular consultation, treatment or service safely.
We may collect:
appointment dates and times;
booking history;
cancellations;
invoices and payment status;
correspondence relating to appointments;
prescription and referral information;
insurance information where relevant; and
records of services provided to you.
Where payment is required, payments may be processed by a third-party payment provider.
We may receive transaction information such as payment status, amount, date and a transaction reference. We do not necessarily receive or store your complete debit or credit card details where these are processed directly by a payment provider.
We may retain communications you send to us through:
website enquiry forms;
email;
telephone;
SMS;
WhatsApp;
appointment systems;
social media; or
other communication channels.
Please remember that information you include in an enquiry about a medical condition may itself constitute health information.
When you use our website, we may automatically collect information including:
IP address;
browser type and version;
device type;
operating system;
approximate location derived from technical information;
referring website;
pages viewed;
date and time of visits;
interactions with the website; and
cookie or similar technology identifiers.
Further information is provided in the Cookies and Tracking Technologies section below.
If you subscribe to our newsletter or agree to receive updates, we may collect:
your name;
email address;
marketing preferences;
consent records; and
information about whether you interact with marketing communications.
We may obtain personal information:
directly from you;
through our website;
during consultations or treatment;
through telephone, email or WhatsApp communications;
from appointment or booking systems;
from another healthcare professional involved in your care;
from your NHS GP where appropriate;
from hospitals, specialists, laboratories, pharmacies or diagnostic providers;
from a parent, guardian or person authorised to act on your behalf;
from insurers where relevant;
through payment providers; and
automatically through our website and permitted cookies or similar technologies.
Where information is obtained from another healthcare provider, it will only be used where appropriate and relevant to your care or another lawful purpose.
We may process your personal information for the following purposes.
We use information to:
assess your health;
provide GP consultations;
provide women's health and menopause care;
assess suitability for treatments;
provide medical weight-management services;
provide preventative and longevity-related healthcare;
provide skin and aesthetic medical treatments;
prescribe medication where clinically appropriate;
arrange diagnostic investigations and blood tests;
make referrals;
communicate with other professionals involved in your care;
monitor your response to treatment; and
maintain an appropriate clinical record.
For ordinary personal information, our lawful basis may include performance of a contract, taking steps at your request before entering into a contract, compliance with a legal obligation, legitimate interests, or another applicable lawful basis.
Because medical information is special-category data, we normally process it where necessary for the provision of health care or treatment by or under the responsibility of a health professional, in accordance with Article 9(2)(h) UK GDPR and applicable UK law.
Other special-category conditions may apply in particular circumstances, for example where processing is necessary to protect vital interests, establish or defend legal claims, meet regulatory requirements, or where you have given explicit consent for a particular use.
We may use your information to:
arrange and confirm appointments;
send appointment reminders;
respond to questions;
process cancellations;
provide invoices and receipts;
follow up after consultations;
communicate clinically relevant information; and
administer the services you have requested.
This processing is generally necessary to provide or administer our services and to manage our relationship with you.
Where clinically appropriate, we may share necessary personal and health information with organisations such as:
pharmacies;
pathology laboratories;
imaging providers;
hospitals;
consultants;
other healthcare professionals; and
your NHS GP or other regular healthcare provider.
Only information reasonably necessary for the relevant purpose will be shared.
We may process information where necessary to:
maintain accurate medical records;
ensure patient safety;
review the quality of care;
investigate complaints;
comply with professional standards;
respond to regulatory requirements;
manage safeguarding concerns;
prevent or detect fraud or misuse; or
establish, exercise or defend legal claims.
We may process personal information for billing, payments, accounting, tax, fraud prevention and financial-record keeping.
We may send newsletters, health updates or promotional communications where you have consented or where another lawful basis is available under applicable electronic-marketing law.
You can withdraw your marketing consent or unsubscribe at any time by:
using the unsubscribe link in an email; or
contacting us at dr@drraqueldelgado.com.
Withdrawing from marketing will not affect essential communications about your appointments, treatment, prescriptions or other aspects of your care.
We may use technical information to:
operate and secure the website;
diagnose technical problems;
understand how visitors use the website;
improve content and usability;
prevent fraud or malicious activity; and
measure website performance.
Where consent is required for analytics, advertising or other non-essential cookies or tracking technologies, those technologies should only be activated after you have provided the appropriate consent.
Health information receives additional protection under data-protection law.
We only process medical and health information where it is necessary and lawful to do so.
In most cases involving your direct medical care, our special-category condition is that processing is necessary for the provision of healthcare or treatment by a health professional subject to professional confidentiality obligations.
Consent to medical treatment and consent under data-protection law are separate concepts.
We do not ordinarily rely on data-protection consent where processing your medical information is necessary to provide appropriate healthcare. However, explicit consent may be used for particular optional purposes where appropriate.
We may take photographs or other images where clinically appropriate, for example to document a skin condition, monitor treatment progress or form part of your medical record.
Images taken for clinical purposes will be treated as confidential medical information.
We will not use identifiable clinical photographs for advertising, social media, website content or other promotional purposes unless an appropriate separate permission or consent has been obtained.
You may refuse promotional use of photographs without affecting your entitlement to medical care.
We do not sell your personal information.
Where necessary and lawful, information may be shared with:
your NHS GP or another GP involved in your care;
hospitals and specialist consultants;
laboratories and diagnostic providers;
pharmacies and prescription providers;
other healthcare professionals involved in your treatment;
clinic premises or healthcare organisations through which your appointment is delivered, where applicable;
appointment and practice-management service providers;
secure communications providers;
IT, website-hosting and technical-support providers;
payment processors;
professional advisers, accountants or insurers;
indemnity providers;
regulators and professional bodies;
law-enforcement agencies, courts or public authorities where disclosure is legally required; and
safeguarding authorities where necessary to protect you or another person.
Some organisations may process information on our behalf as data processors. Others, particularly healthcare providers, laboratories, pharmacies, hospitals and clinic operators, may act as independent data controllers for information they receive.
Where a third party processes information on our behalf, we require appropriate confidentiality, data-protection and security arrangements.
Private healthcare is often provided alongside NHS care.
Where appropriate, and subject to applicable confidentiality and data-protection requirements, we may recommend sharing relevant information with your NHS GP or another healthcare professional to support continuity and safety of care.
There may also be exceptional circumstances where information can or must be disclosed without your consent, including where required by law, where necessary for safeguarding, or where there is a sufficiently serious risk of harm.
Any such disclosure will be considered carefully and handled in accordance with applicable professional confidentiality requirements.
Our website provides the option to contact us using WhatsApp.
If you contact us using WhatsApp, information will also be processed through WhatsApp and its associated service providers in accordance with their own privacy arrangements.
Although we take reasonable steps to protect confidential communications, electronic communications can carry security risks.
Please avoid sending unnecessary sensitive medical information through general messaging services. Where a more secure communication method is appropriate, we may ask you to use an alternative method.
WhatsApp, email and website enquiry forms should not be used for medical emergencies.
Some technology, communications, website, booking, payment or other service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer complies with applicable data-protection law.
Depending on the destination and provider, safeguards may include:
a UK adequacy regulation;
the UK International Data Transfer Agreement;
an approved UK Addendum to standard contractual clauses; or
another legally recognised transfer mechanism.
Where appropriate, additional technical or contractual safeguards may also be used.
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to satisfy applicable legal, regulatory, professional, clinical, insurance, tax and accounting requirements.
Clinical records may need to be kept for considerably longer than ordinary website or administrative information because of patient-safety, continuity-of-care, professional and medico-legal requirements.
When deciding how long information should be retained, we consider:
the type and sensitivity of the information;
the nature of the healthcare provided;
applicable professional and healthcare record-retention guidance;
legal limitation periods;
regulatory obligations;
insurance or indemnity requirements;
safeguarding requirements; and
whether information may be required for the establishment, exercise or defence of legal claims.
Website enquiries that do not result in a clinical relationship will generally be retained for a shorter period than patient medical records.
Marketing information will be retained while you remain subscribed or as otherwise necessary to record your marketing preferences. We may retain a minimal suppression record after you unsubscribe to ensure that your preference continues to be respected.
Where information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our retention procedures.
We take appropriate technical and organisational measures designed to protect personal and medical information against:
unauthorised access;
accidental loss;
inappropriate disclosure;
alteration;
misuse; and
unlawful destruction.
Measures may include access controls, authentication, encryption, secure systems, backups, confidentiality procedures and restrictions on who may access patient information.
Access to medical information is limited to individuals who have a legitimate need to access it.
All medical information is also handled in accordance with applicable professional duties of confidentiality.
No internet-based service can be guaranteed to be completely secure. However, we regularly consider the nature and sensitivity of the information processed when deciding what protections are appropriate.
Our website may use cookies and similar technologies.
These are required for essential website functions, security or services specifically requested by you. Where permitted by law, they may be used without consent.
Where required by law, analytics, advertising or other non-essential cookies and similar technologies will only be used after you have made the relevant choice through our cookie-consent mechanism.
You should be able to reject non-essential cookies as well as accept them.
Where applicable, our cookie banner or separate Cookie Policy provides further information about:
which cookies or technologies are used;
their purpose;
the provider;
how long they remain active; and
how you can change or withdraw your choices.
You can also control cookies through your browser settings, although blocking some strictly necessary technologies may affect website functionality.
Our website may contain links to third-party websites or services, including healthcare providers, booking systems, social-media platforms, WhatsApp or other services.
Those organisations may act as separate data controllers and operate under their own privacy policies.
We are not responsible for the privacy practices of independent third-party websites and recommend reviewing their privacy information before providing personal data.
Depending on the circumstances, UK data-protection law gives you rights including the right to:
access personal information we hold about you;
correct inaccurate or incomplete information;
request erasure of personal information in certain circumstances;
request restriction of processing in certain circumstances;
object to certain types of processing;
receive or transfer certain information under the right to data portability;
withdraw consent at any time where processing is based on consent; and
object to direct marketing at any time.
These rights are not absolute.
For example, we may be required or permitted to retain medical records even where you request deletion because of clinical, legal, regulatory, professional or medico-legal requirements.
If you wish to exercise any of your rights, contact:
Email: dr@drraqueldelgado.com
We may need to verify your identity before releasing or changing personal information.
We will respond within the timescale required by applicable data-protection law.
There is normally no charge for exercising your data-protection rights, although the law permits charges or refusal in certain limited circumstances.
We do not use your health information to make solely automated decisions that produce legal or similarly significant effects unless this is permitted by law and appropriate safeguards have been put in place.
If this changes, we will provide the information required by data-protection law.
Some of our healthcare services may be available to patients under 18 where clinically and legally appropriate.
Information concerning children and young people is handled with particular care.
Depending on the young person's age, understanding, the nature of the treatment and applicable law and professional guidance, it may be appropriate to involve a parent or legal guardian.
However, young people may also have rights to medical confidentiality in their own right.
We will assess these matters individually and in accordance with applicable clinical, safeguarding and professional requirements.
We maintain procedures for identifying, investigating and responding to personal-data breaches.
Where a breach is likely to result in a risk to individuals' rights and freedoms, we will notify the Information Commissioner's Office where required by law.
Where a breach is likely to result in a high risk to an affected individual, we will also inform that individual where legally required.
If you have a concern about how we use your personal information, please contact us first so that we can investigate it.
Email: dr@drraqueldelgado.com
Telephone: +44 78797 10046
You also have the right to make a complaint to the UK's data-protection regulator:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information about making a complaint is available from the ICO at ico.org.uk.
We may update this Privacy Policy periodically to reflect:
changes to our services;
changes to the technology or service providers we use;
changes to our data-processing activities; or
changes to legal or regulatory requirements.
The latest version will be published on this website and the "Last updated" date at the top of the policy will be amended.
Where a change materially affects how we use your personal information, we will take reasonable steps to bring the change to your attention where appropriate.
For privacy questions, data-protection requests or concerns about the handling of your personal information, contact:
Dr Raquel Delgado
Email: dr@drraqueldelgado.com
Telephone / WhatsApp: +44 78797 10046
Website: https://drraqueldelgado.com
Postal address: Bilba Clinic 57 Great Titchfield Street, Fitzrovia, London W1W 7PN
Webdesign by EyeMedia Creative