Issued 6th October 2026
This notice is for children and young people under 16 who come to ROC Clinic in Aberdeen or London or attend our video consultation service. Your parents or carers can read it with you. It now includes information about our AI scribe, which can help your doctor write notes. There is also a full privacy notice for adults.
A privacy notice tells you how our clinic uses information about you. This includes your name, address and date of birth, and all the notes your doctor or nurse writes about you in your health record.
The law says we must tell you what information we keep about you, why we keep it, and what we do with it. It also says we must keep it safe.
Great question! The law is called the UK General Data Protection Regulation (UK GDPR for short), together with the Data Protection Act 2018. These are rules that make sure your doctors, nurses and everyone else at the clinic look after your information properly and keep it safe.
You can find it on our website, and we have copies at our clinics. If you would like a copy, just ask anyone on our team.
Don’t worry, we only collect the information we need to help keep you healthy. This includes:
We use your information to look after your health. Sometimes we need to share it with other doctors and nurses who are helping to care for you, for example at a hospital if you need to see a specialist or have an X-ray, or your NHS GP.
We will never use your information for anything else, like research, without asking you, or your parents or carers, first.
If you have a health condition that lasts a long time, it is important that the other people looking after you know about it. We share what they need to know so that you get the right care when you need it.
We know how important it is to protect your information. We keep it on secure computer systems, only people who are looking after you can see it, and all our staff are trained to keep it safe. We keep health records for 30 years, because you might need them when you are grown up.
Sometimes your doctor might want to record what you talk about, so that a computer program called an AI scribe (AI stands for artificial intelligence) can help write up the notes. This means your doctor can look at you and listen, instead of typing.
For parents and carers: the AI scribe uses Microsoft Azure AI Speech to transcribe the consultation and a Microsoft Azure OpenAI model to draft the note, both hosted in the UK. Microsoft acts as our data processor, does not store the content for monitoring, and does not use it to train AI. The recording, transcript and draft are deleted within 7 days; the note your child’s clinician approves becomes part of their medical record. You can ask for a recording to be deleted early. More detail is in our adult privacy notice.
All our patients, whatever their age, can say they don’t want their information shared. If you’re under 16, your parents or carers will usually help decide. Anyone on our team can explain what this means for you.
Yes. You have the right to see the information we keep about you. To do this, you (or your parents or carers) can ask our Data Protection Officer for a copy. This is called a Subject Access Request.
If you’re under 16, your parents or carers will usually ask for you. But if you’re old enough to understand what it means, you may be able to ask yourself. In Scotland, if you’re 12 or older, we will normally treat you as old enough. You can also ask us to correct anything that’s wrong.
Ask anyone on our team, or your parents or carers. You can also contact our Data Protection Officer, Dr Cristina Romete, at cristina.romete@rochealthservices.com.
If you are unhappy with how we have handled your information, please contact our Data Protection Officer, or our Clinic Managers at info@rochealthservices.com. You may also access the Complaints Policy and submit a complaint by accessing this link: https://rocprivateclinic.com/complaints/
You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
how you prefer to be contacted, including whether you would like encrypted email.
We review this notice regularly. A copy is available in our clinics and on request. This notice was last updated on 6th October 2026.
| Cookie | Duration | Description |
|---|---|---|
| AnalyticsSyncHistory | 1 month | No description |
| li_gc | 2 years | No description |
| Cookie | Duration | Description |
|---|---|---|
| _fbp | 3 months | This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. |
| fr | 3 months | Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. |
| IDE | 1 year 24 days | Google DoubleClick IDE cookies are used to store information about how the user uses the website to present them with relevant ads and according to the user profile. |
| test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
| Cookie | Duration | Description |
|---|---|---|
| __hstc | 1 year 24 days | This is the main cookie set by Hubspot, for tracking visitors. It contains the domain, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). |
| _ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat_UA-19477224-1 | 1 minute | A variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance. The pattern element in the name contains the unique identity number of the account or website it relates to. |
| _gcl_au | 3 months | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| hubspotutk | 1 year 24 days | HubSpot sets this cookie to keep track of the visitors to the website. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. |
| Cookie | Duration | Description |
|---|---|---|
| __cf_bm | 30 minutes | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| __hssc | 30 minutes | HubSpot sets this cookie to keep track of sessions and to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. |
| bcookie | 2 years | LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID. |
| bscookie | 2 years | LinkedIn sets this cookie to store performed actions on the website. |
| lang | session | LinkedIn sets this cookie to remember a user's language setting. |
| lidc | 1 day | LinkedIn sets the lidc cookie to facilitate data center selection. |
| UserMatchHistory | 1 month | LinkedIn sets this cookie for LinkedIn Ads ID syncing. |