Privacy Policy


This privacy notice sets out how Dr Penelope Law, BA Hons, MRCOG uses and protects any personal information collected or generated in relation to you whilst using the website

Dr Penny Law takes your privacy seriously and has reviewed and updated internal operational policies, processes and procedures to comply with the General Data Protection Regulation (EU) 2016 / 679 (“GDPR”) and UK Data Protection Act 2018.

What is collected and the purpose of processing

The types of personal data collected when you use

  1. Session cookies – please see our Cookie policy and the cookie consent pop up tool

If you contact us to arrange an appointment, you will use the email address listed on our website.  In emailing us you are consenting to provide additional personal contact data in order for us to arrange your appointment:

  • Name
  • Email address
  • Phone number
  • Address
  • Medical service requested

Legal Basis for Processing Data

Your consent

When you email us, you are agreeing to us using your data in order to contact you for the reason specified in the email.

Becoming a patient

If you decide to become a valued patient, Dr Penelope Law will require certain additional personal information in order to provide the requested medical services.  During the patient registration process, further information will be provided to explain how this additional patient data will be used and the lawful basis for using it.

What we do with the information we gather

Contact Data

Is used to respond to your queries, requests or questions and to deliver services to you.

This data is stored for as long as you may be a patient with Dr Penelope Law and for seven years thereafter.

Supplier Data

If you become a supplier to Dr Penelope Law, you are required to provide us with your contact information and payment details for the performance of our contract together.  This data is stored for as long as you may be a supplier with us and for seven years thereafter for legal reasons.

Links to other websites

This site contains links to external sites which contain useful information related to our services and other medical service providers. Dr Penelope Law takes care to ensure that any sites listed on our website are reputable and relevant to our medical services.

As you probably realise, once you use these links we do not have any control over how that external site may use your personal data, so we cannot be responsible for the protection and privacy of any information you provide whilst visiting those sites.

Please do exercise caution and look at the privacy notices applicable to external sites.

From time to time, there may be YouTube videos embedded in the website for information purposes.  When viewing these videos, certain information is passed from this website to YouTube in order to play the videos.  This information is passed via the use of Cookies and you have the option to opt in or out of certain cookies by using our cookie consent tool.

Source of your data and recipients of your data

  •  Your Contact data is provided by you when you email us
  • The cookie data comes from your use of our site

Any analytical data collected via cookies is anonymised and used solely for Dr Penelope Law’s purposes and this information is not passed to any other party.  You have the option to opt out of analytical data collected via cookies, by using our cookie consent tool.

Automated decision making

No automated decisions are made using any personal information collected using this site.


We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we receive from you when using this website or emailing us on the contact details provided.

Data Transfers outside the EEA

We do not send any Personally Identifiable data outside the EEA.

Data Processor agreements

This applies to third party organisations Dr Penelope Law may use from time to time to manage this website.

We have ensured they have committed to implementing appropriate technical and organisational measures in place to meet their obligations under the Data Protection regulations.

Your rights

You are entitled to ask about the data that is held about you, subject to certain exceptions.  This is called a Subject Access Request (SAR).  These should be made by email or in writing to Dr Penelope Law at the following addresses:

Address: The Portland Hospital, 215 Great Portland St, London W1W 5PN

In addition, the Data Protection regulation provides the following rights for individuals:

  • The right to be informed
  • The right of access
  • The right to rectification
  • The right to erasure
  • The right to restrict processing
  • The right to data portability
  • The right to object
  • Rights in relation to automated decision making and profiling

Dr Penelope Law makes every attempt to ensure you are satisfied with the handling of your data queries or requests.  However, you have the right to complain to the Information Commissioners Office (ICO) if you are not satisfied with the handling of your requests about the protection of your data.  Follow the link below to report a concern to the ICO.

Last updated: January 2020