A Privacy policy for an ENT Nurse Practitioner conducting ear wax removal must comply with data protection regulations such as GDPR in the UK/EU and medical confidentiality requirements. It should cover the collection, use, storage, and sharing of patient data, including special category health information.
Privacy Policy & Privacy Notice
Name of Clinic/ Practitioner : Dewax and Go / Natalie Rhodes
Role: ENT Nurse Practitioner / Specialist Ear Care Nurse
Date Effective : March 2026
Dewax and Go committed to protecting your privacy. this policy explains how we collect, use, and store your personal and sensitive data when you use our ear wax removal services.
As an ENT Nurse Practitioner , I am registered with the NMC and RCN and adhere to strict Confidentiality Standards.
We collect personal information necessary to provide safe, effective care, which may include:
personal details: name, date of birth, address, phone number, and email.
medical history: relevant ear health history, current symptoms, medication, and allergies.
Clinical Records : Notes regarding your examination, the procedure "micro suction ", and outcome.
Digital images / Videos: During Micro suction, recordings of the inner ear may be used for medical, diagnostics, or educational purposes.
Financial Data: Payment information "if not handled entirely by a third party payment processor".
Lawful basis for processing data we process your data based on: Contractual necessity to provide the services you have booked.
Health and Social Care: for medical diagnosis and the provision of healthcare "Article 9 GDPR"
Consent : for marketing communications "if applicable
How we use your information.
Your information is used to: provide ear wax removal and ear care services.
Ensure the quality and safety of your treatment.
Maintain accurate medical records.
Communicate with regarding your appointments.
Share with your GP only if clinically necessary and with your consent "unless legally required".
Sharing your Data.
We do not sell or pass on your data to third parties for marketing purposes we may only share your information in these circumstances with your GP or ENT specialist : if required for follow up care.
Service providers: third parties who help us operate "eg electronic booking systems, secure IT cloud storage".
Legal / regulatory obligations : to comply with court orders if required by law.
Data security and storage physical records: any paper records are kept in locked cabinets with a secure restricted access area.
Electronic records: held on secure password protected systems
Data retention
We retain clinical records for eight years after your last appointment or longer if required by law.
Your rights
Under GDPR you have the following rights:
Access: to request a copy of the information we hold about you.
Rectification: to ask us to correct inaccurate data.
Erasure: to request that we delete your data.
Withdraw consent: you can withdraw your consent for us to hold your data at anytime.
if you have any questions or wish to exercise your rights, please contact me directly .
