Call 020 3146 1771enquiries@chest-clinic.co.uk
For GPs & referrersFees & insurance
The Chest Clinic

Home / Privacy notices / Respiratory Diagnostics Ltd

Privacy notice – Respiratory Diagnostics Ltd

How information from your lung function and exercise tests is collected, used and shared.

Last updated: November 2026

This privacy notice explains how Respiratory Diagnostics Ltd collects, uses, stores and shares personal information when it carries out lung function and cardiopulmonary exercise tests.

1. Who is responsible for your information?

Respiratory Diagnostics Ltd is the data controller for the information it collects when it performs your tests. It is registered with the Information Commissioner’s Office as a data controller (registration ZB709358) and with the Care Quality Commission for diagnostic and screening procedures (CQC provider 1-20709565644).

Respiratory Diagnostics Ltd is a subsidiary of London & Hertfordshire Respiratory Diagnostics Ltd. It is registered in England and Wales, company number 15433910.

The consultant who requested your tests, and the hospital or clinic where they take place, are separate data controllers for the information they hold. Please read their privacy notices too.

2. Contact details

Respiratory Diagnostics Ltd
c/o London & Hertfordshire Respiratory Diagnostics Ltd
Ground Floor, Suite 28, The Maylands Building
200 Maylands Avenue
Hemel Hempstead
HP2 7TG

Telephone: 020 3146 1771
Email: enquiries@chest-clinic.co.uk

3. Information we collect

We collect and store:

  • identifying details: your name, date of birth, address, contact details, and hospital, NHS or insurer reference numbers;
  • information needed to perform and interpret your tests, such as your age, sex, height and weight;
  • relevant medical history, medicines and inhaler use, and any reasons a test may need to be adapted or postponed;
  • the name of the consultant who requested the tests and the hospital or clinic where they take place; and
  • your test results, measurements, traces and reports.

Information about your health is special-category personal data under UK data protection law.

4. Where information comes from

Information comes from you, from the consultant or clinician who requested your tests, and from the hospital or clinic where the tests are carried out.

5. Why we use your information

We use your information to:

  • identify you correctly and keep your results with the right record;
  • carry out your tests safely;
  • produce accurate results and reports;
  • send your results to the consultant who requested them and to the hospital or clinic where the tests were done;
  • compare results over time when you have repeat tests;
  • check the quality and safety of our service and meet our CQC registration requirements;
  • deal with enquiries, complaints and incidents; and
  • meet legal, regulatory and insurance obligations.

6. Our lawful bases

Article 6(1)(b): contract

Processing is necessary to provide the tests you have been referred for.

Article 6(1)(c): legal obligation

Some processing is needed to meet our legal and regulatory obligations, including those of a CQC-registered provider.

Article 6(1)(f): legitimate interests

Some processing, such as quality assurance and keeping systems secure, is in our legitimate interests in running a safe and effective diagnostic service.

Article 9(2)(h): healthcare

Health information is processed for medical diagnosis and the provision of healthcare by, or under the responsibility of, health professionals bound by confidentiality.

Article 9(2)(f): legal claims

Processing may be necessary to establish, exercise or defend legal claims.

7. Who we share information with

We share your results, with the identifying details needed to match them to you:

  • with the consultant who requested your tests; and
  • with the hospital or clinic where the tests were carried out, so they form part of your record there.

We may also share information, where necessary and proportionate, with:

  • suppliers of our testing equipment and IT systems, acting as data processors under written contracts;
  • our professional advisers, auditors and insurers;
  • the Care Quality Commission, the Information Commissioner’s Office or other regulators; and
  • courts, law-enforcement or safeguarding authorities where the law requires it.

We do not sell your information or use it for marketing.

8. International processing

Your information is normally held in the United Kingdom. If a supplier processes information outside the UK, we make sure an approved safeguard is in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.

9. How we protect information

We protect information with named user accounts, role-based access, secure devices and systems, encryption where supported, staff confidentiality and information-governance training, and contracts with our suppliers.

10. How long we keep information

Test results and the identifying details linked to them are kept for 11 years from the date of the test. They may be kept for longer where there is a complaint, claim, investigation, safeguarding concern or legal hold, and are then securely deleted.

11. Your rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of your information;
  • ask us to correct inaccurate information;
  • ask us to restrict processing or object to it; and
  • ask for information to be erased where there is no overriding reason to keep it.

These rights are not absolute: an accurate record of test results usually needs to be kept for your safety and continuing care. We do not make solely automated decisions about you.

To make a request, contact us using the details in section 2. We may need to confirm your identity first.

12. Complaints

Please contact us first if you are concerned about how your information has been used. You can also complain to the Information Commissioner’s Office: telephone 0303 123 1113, website ico.org.uk.

13. Changes to this notice

We review this notice regularly and will publish any changes on this website.