Privacy Policy
Patient data, information and communication
Effective date: 25 September 2026
This Privacy Policy governs the collection, receipt, use, processing, storage, disclosure, transfer, retention and protection of personal data by Candrol Centre of Oncology (“Candrol”, “we”, “us” or “our”) in connection with our website, enquiry and care-related forms, telephone and WhatsApp communications, email, teleconsultation, video consultations, patient-support activities, payment and administrative interactions, treatment and information requests, and delivery-related activities.
By submitting information to Candrol or engaging with our services, you acknowledge the purposes described in this Policy and applicable law. Where a consultation, invoice, payment instruction, or supply document separately identifies a purpose or a limited use, that purpose shall prevail to the extent it is more specific.
The information that may be collected includes a patient’s and attendant’s name, age or date of birth, sex, contact details, email address, country, telephone and WhatsApp number, medical records, referral details, relationship to the patient, clinical history, symptoms, test reports, prescriptions, reports for diagnostic services, consultation information, payment details, diagnoses, treatment history, photographs and images, and information required to coordinate care.
We may also process information related to health conditions, consultations, prescriptions, treatment choices, therapies, appointments and functional information. This may include information supplied directly by you, by your family, by a representative, or through authorised clinical records, provided that it is relevant to your enquiry, consultation, service or treatment request.
Personal data may be used for medical and administrative purposes, including responding to enquiries, scheduling appointments, coordinating teleconsultations, preparing quotations, processing payments, issuing invoices and receipts, communicating appointment updates, verifying identity, improving our services, maintaining clinical and administrative records, and complying with legal, regulatory and safety requirements.
Where consent is the applicable basis, consent may be withdrawn prospectively and does not invalidate processing previously undertaken. You may request access, correction, updating, withdrawal of consent, deletion, restriction, objection, portability or related rights, subject to applicable law and our legal obligations. Requests may be sent using the contact information available on our website.
If a person submits medical or health-related information concerning another individual, that person represents and warrants that they have lawful authority to provide the information for the stated purpose. In the case of a patient who is a minor or lacks capacity, consent or authority from a parent, guardian or other lawfully authorised representative may be required.