Privacy.
Clear and considered.

CECS Clinic is a trading name of MSK DOCTORS & ASSOCIATES LIMITED, a company registered in England and Wales (company number 12301444). Our registered office is MSK House, London Road, Silk Willoughby, Sleaford, England, NG34 8NY.

This policy explains how we handle personal information through cecsclinic.com and when you use our booking services. We are the data controller for that processing under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our Data Protection Officer is Chengke Sun. For privacy questions or requests, email chengke@mskdoctors.com or write to our registered office.

When you arrange a discovery call, consultation or diagnostic package, we collect the details needed to handle your request. These may include your name, email address, telephone number, date of birth, appointment selection, correspondence and booking confirmations.

For paid bookings, we also keep order, payment-status and booking-policy acceptance records. Stripe handles the card payment; the booking service receives payment references and status information.

Our hosting and service providers may process technical information, such as IP addresses, browser information and request logs, to deliver the site, diagnose faults and protect the service.

• Bookings and enquiries: taking steps at your request before a contract, or performing a contract with you (Article 6(1)(b)).
• Legal and accounting requirements: complying with our legal obligations (Article 6(1)(c)).
• Security and service administration: our legitimate interests in keeping the website and booking services reliable, preventing misuse and handling disputes (Article 6(1)(f)).
• Optional processing based on consent: where we ask for your consent, you can withdraw it without affecting processing already carried out (Article 6(1)(a)).

Health information also requires a special-category condition, as explained below.

The symptom questionnaire runs in your browser. Answers are held in page memory and are not submitted to the clinic, saved in browser storage or included in booking links. You can choose to copy or print a summary; any copy you create is under your control.

If you later share your summary, symptoms or medical reports with the clinical team, that information becomes part of the enquiry or care process. Ask the team how to send clinical documents securely.

Health information is special-category personal data. Where processing is necessary for diagnosis or healthcare under the responsibility of a professional bound by confidentiality, the relevant condition is Article 9(2)(h). Where we rely on explicit consent for a separate purpose, we ask for it specifically (Article 9(2)(a)). Submitting an enquiry is not blanket consent for every use of health information.

Discovery-call and diagnostic-package forms send the information you submit to the MSK booking service to arrange your appointment, verify your email where required, manage your order and send service messages.

The consultation link takes you to London Cartilage Clinic. That website explains its own cookies and processing in its privacy policy. A choice made on CECS Clinic does not automatically grant consent on another domain.

Diagnostic-package checkout uses a secure booking-session cookie so you can continue your order. Verification and resume links contain temporary access tokens: keep these links private. Booking-policy acceptance is separate from clinical consent.

We use necessary cookies to remember your cookie choices and maintain a secure booking session. You can reopen cookie settings using the cookie control on this site. Blocking necessary cookies may prevent checkout from working.

• Consent preferences (ph_consent): remembers your choices for up to one year.
• Diagnostic booking session (cecs_package_session): maintains access to your saved order for up to 30 days. Temporary resume cookies last up to 10 minutes.
• Payment services: Stripe may use cookies or similar technologies needed to process payments and prevent fraud when you use checkout. See Stripe’s privacy policy.

Deleting a browser cookie does not delete an order or clinical record held by the booking service. Contact us if you want to exercise your data rights.

Optional browser analytics and session replay are not enabled on cecsclinic.com at present. Choosing an optional category in the cookie panel does not itself enable those tools. This does not prevent the necessary booking, payment or security processing described in this policy.

Questionnaire answers are excluded from analytics and session replay. If optional tracking is introduced, this policy and the consent information will be updated before it is used.

We share information with authorised staff and providers where needed to operate the website, arrange care and fulfil bookings. These include our hosting providers, Stripe for payment processing and Postmark for transactional email delivery. Clinical information may be shared with the professionals or diagnostic providers involved in your care.

Some providers may process information outside the UK. Where required, transfers must be covered by an adequacy decision or appropriate contractual safeguards. Contact us for details of the safeguards applicable to your information.

We may also disclose information where required by law or where necessary to establish, exercise or defend legal claims.

We retain personal information for as long as needed for the purpose for which it was collected, taking account of clinical record-keeping, accounting, legal obligations and the handling of complaints or claims.

Booking and consultation data is normally retained for seven years from your last interaction, and enquiry correspondence for two years from your last correspondence. Some clinical or legal circumstances require longer retention. You can ask us which period applies to your records.

Questionnaire answers are not retained by this website. Cookie lifetimes are described above; they are separate from the retention of booking and clinical records.

We use access controls and technical and organisational measures to protect information held by our services. Payment transactions use encrypted connections. No internet transmission is completely secure; please ask the team for an appropriate way to share medical documents.

Subject to the conditions in data protection law, you can request access to your information, correction of inaccurate information, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests and withdraw consent where we rely on it.

These rights are not absolute. For example, we may need to retain clinical or financial records to meet legal obligations or deal with a claim. We will explain any applicable restriction when responding to your request.

Email chengke@mskdoctors.com to exercise your rights. You can also complain to the Information Commissioner’s Office (ICO).

We will publish updates on this page when our services or processing change. Last updated: 13 October 2026.