Who is responsible for your data?
The data controller is PASECOM GROUP LTD, trading as Private MRI, company number 17139327, registered office 82a James Carter Road, Mildenhall, IP28 7DE. We are registered with the Information Commissioner's Office (ICO) under registration number ZC117546. Contact us about your data at hello@private-mri.co.uk, on 01455 242326, or by post to the registered office.
What data do we collect when you request a scan?
When you use the "Request a private MRI" form, we collect:
- the body area you want scanned, your town or postcode, how soon you want the scan, whether you are self-paying or insured, and whether you have a GP letter;
- your name, phone number and email address;
- anything you choose to write for the centre (up to 400 characters);
- the date and time you sent the form, the page you sent it from, and the exact consent wording you agreed to;
- a one-way scrambled (hashed) version of your IP address and your browser type, used only to detect spam and abuse.
Some of this is health information, which the law treats as special category data: the body area, whether you have a GP letter, and anything you write in the notes box. Please do not put more health detail in the notes than a centre needs to contact you.
Why do we use it, and on what legal basis?
We use your request for one purpose: to pass it to one independent scanning centre that covers your area and body area, so that it can contact you about a private MRI. Our legal basis is your consent (UK GDPR Article 6(1)(a)), and for health information your explicit consent (Article 9(2)(a)). You give it by ticking the consent box, which names the purpose and the type of recipient.
We also keep a record of requests to show what you consented to and when, to deal with any questions or complaints, and to see where people need a centre that we do not yet cover. Our legal basis for that record-keeping is our legitimate interest in running the service properly and being able to prove consent.
Who do we share it with?
- One independent scanning centre that covers your area, if one does. It becomes responsible for your data once it receives it, under its own privacy notice. It may contact you by phone or email.
- Our service providers, who act only on our instructions: our web host (IONOS), which stores the website and the request records, and our email providers, which carry the alert we send ourselves when you submit the form.
- Authorities, only if the law requires it.
We do not sell, rent or trade your data. If no centre covers your area, we do not send your request to anyone.
How long do we keep it?
We keep request records for 12 months from the date you send them, then delete them, unless you ask us to delete them sooner or we need to keep a record for longer to deal with a complaint or a legal claim. The centre that receives your request keeps its copy under its own policy.
What are your rights?
You have the right to:
- withdraw your consent at any time (this does not affect what happened before you withdrew it);
- ask for a copy of the data we hold about you;
- ask us to correct it;
- ask us to delete it;
- ask us to restrict or stop using it;
- ask for your data in a portable format;
- complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
To use any of these rights, email hello@private-mri.co.uk. We will reply within one month. If we have passed your request to a centre, we will tell you which one so you can contact it too.
Cookies and analytics
This website does not use advertising cookies. If we switch on Google Analytics to count visits, you will see a banner asking you to accept or reject analytics cookies. Until you choose "Accept", analytics cookies stay off. If you accept, Google Analytics sets cookies (such as _ga) to tell visits apart, and Google processes the data on our behalf; that data may be processed outside the UK under safeguards Google provides. We do not send Google your name, phone number, email address, postcode or anything you type in the form. When a request is successfully submitted, we record an event that contains only the body area, the city page and the form location, never your personal details.
Your choice is stored in your browser (local storage, key "pmri_consent") so we do not ask again. You can change it at any time with the button below, or by clearing this site's data in your browser.
How do we keep your data secure?
Requests are stored in a protected folder that the public website cannot serve, on our web host's servers. Access is limited to the people who run the service. The website uses an encrypted connection (HTTPS). No system is perfectly secure; if something goes wrong that puts your data at risk, we will tell you and the ICO where the law requires.
Children
This service is for adults. Many centres only accept self-referral from people aged 18 or over. If you are making a request for a child, please speak to their GP.
Changes to this notice
We will update this page if anything changes and show the date at the top. This version was last reviewed on 5 October 2026.
Do you sell my details?
No. We pass your request to one scanning centre that covers your area, with your consent, and to no one else except the service providers we need to run the site.
How do I delete my data?
Email hello@private-mri.co.uk. We will delete your request and reply within one month.
Do you use cookies?
Only Google Analytics cookies, and only if we switch analytics on and you choose Accept. No advertising cookies.
Looking for a scan? Request a private MRI. Free for you; the centre may pay us.