Last updated: 25 July 2026
Miracle Inside is committed to protecting the privacy, confidentiality and security of the personal information entrusted to us.
This Privacy and Cookie Policy explains how we collect, use, store, share and protect personal information when you:
This policy applies to patients, clients, website visitors, people making bookings for someone else, accompanying persons and anyone whose personal information is processed in connection with our services.
We process personal information in accordance with applicable UK law, including:
In this policy, references to “Miracle Inside”, “we”, “us” or “our” mean Miracle Inside UK Ltd and, where relevant to a particular blood-testing or diagnostic service, Miracle Inside Diagnostic Scan Clinic Ltd.
This policy replaces all previous privacy and cookie statements published on the Miracle Inside website.
Organisation name: Miracle Inside UK Ltd
Company number: 09484044
ICO registration reference: ZA297163
Registered office and data-protection correspondence address:
35 Victoria Road
Brighouse
HD6 4DX
United Kingdom
Miracle Inside UK Ltd is the parent company and the principal data controller for information processed through:
Miracle Inside UK Ltd is the Care Quality Commission-registered provider responsible for Miracle Inside’s regulated diagnostic imaging services.
The registered office above is used for Companies House, ICO registration and formal data-protection correspondence.
The regulated clinical service location is displayed separately on our Contact and Booking pages and on the Care Quality Commission’s public register. The inclusion of a clinical service location on those pages does not make it an additional registered office.
Miracle Inside Diagnostic Scan Clinic Ltd
Company number: 12262930
Miracle Inside Diagnostic Scan Clinic Ltd is a related sister company involved primarily in:
Unless you are informed otherwise when booking, consenting to or paying for a service, Miracle Inside UK Ltd remains the principal data controller for information collected through the Miracle Inside website and central systems.
Where Miracle Inside Diagnostic Scan Clinic Ltd processes information on the documented instructions of Miracle Inside UK Ltd, it acts on behalf of Miracle Inside UK Ltd.
Where the sister company independently determines why and how personal information is processed, or jointly determines this with Miracle Inside UK Ltd, the responsible company or companies will be identified through the relevant booking information, consent form, invoice, laboratory documentation or service-specific privacy information.
You may send a data-protection request concerning either company to the contact details below. Miracle Inside UK Ltd will co-ordinate the response and direct the request to the appropriate company where necessary.
The named data-protection contact is:
Title: Mr
Name: Godson Johnson
Data-protection enquiries, Subject Access Requests, requests to exercise your rights and privacy complaints should be sent to:
Email: GODSON@MIRACLEINSIDE.com
Postal address:
Data Protection Contact
Miracle Inside UK Ltd
35 Victoria Road
Brighouse
HD6 4DX
United Kingdom
General service enquiries may be sent to:
Email: info@miracleinside.com
When contacting us about your information, please provide enough information to help us identify you and locate the relevant records. This may include:
We may ask for reasonable evidence of your identity or authority before releasing confidential information or acting on a request made on behalf of another person.
The information we collect depends on how you interact with us and which services you receive.
This may include:
This may include:
For pregnancy-related services, we may collect:
For women’s health and other diagnostic services, we may collect:
Information created during or after an ultrasound appointment may include:
Where you undergo a blood test, we may collect:
Certain genetic, fertility, prenatal, oncology or specialist tests may require additional clinical information and specific consent.
This may include:
Online and card payments are processed through authorised external payment providers.
Miracle Inside does not normally receive or retain your complete payment-card number, card-security code or full payment credentials.
We may retain information contained in:
Telephone calls may be recorded for quality, training, security or complaint-management purposes. Where calls are recorded, appropriate notice will be provided.
When you use our website, we may collect:
This may include:
We do not use detailed clinical findings, ultrasound reports, laboratory results or genetic information for general marketing purposes.
Where CCTV operates, it may record individuals entering, leaving or moving through monitored public areas.
CCTV is not used in ultrasound examination rooms, phlebotomy rooms, changing areas or other areas where patients reasonably expect complete privacy.
Information concerning health, pregnancy, fertility, genetics, medical conditions and diagnostic findings is classified as special category personal data.
Special category information receives additional protection under Article 9 of the UK GDPR and the Data Protection Act 2018.
Our principal condition for processing health information is:
Article 9(2)(h) UK GDPR — processing necessary for:
This is supported by Schedule 1, Part 1, paragraph 2 of the Data Protection Act 2018.
Processing under this condition is carried out by, or under the responsibility of, healthcare professionals and authorised staff who are subject to professional, contractual or legal duties of confidentiality.
Depending on the circumstances, we may also rely on:
Consent is not always the lawful basis for processing clinical information.
We may need to retain and use clinical records to provide healthcare, maintain accurate records, meet legal and regulatory obligations, investigate an incident or respond to a legal claim, even where consent is subsequently withdrawn.
We apply additional safeguards to health and special-category information, including:
We must identify a lawful basis under Article 6 of the UK GDPR whenever we process personal information.
Where health or other special-category information is involved, we must also identify an appropriate Article 9 condition.
We use information to:
Our usual Article 6 bases are:
Where health information is involved, the additional condition will normally be Article 9(2)(h).
We use information to:
Our usual legal bases are:
We use information to:
Our usual legal bases are:
Where appropriate, we may communicate with:
Information may be shared:
We use transaction information to:
Our legal bases may include contract, legal obligation and legitimate interests.
We may use information to:
The legal bases may include contract, legal obligation and legitimate interests.
Health information may be processed under Article 9(2)(h) or Article 9(2)(f).
Information may be processed for:
Where reasonably possible, anonymised or de-identified information will be used for training and service-improvement activities.
We may process technical information to:
Our usual bases are legitimate interests, legal obligation and consent where required for non-essential cookies.
We may process information to comply with:
We may obtain personal information:
A person making a booking for someone else must have appropriate authority to provide that person’s information.
We do not sell or rent personal information.
We only share information where it is necessary, proportionate and legally permitted.
Recipients may include:
Organisations processing information on our behalf are required to use it only for agreed purposes and to apply appropriate security, confidentiality and data-protection measures.
Miracle Inside works with external laboratories to provide blood, genetic, prenatal, fertility and other specialist tests.
When you undergo a laboratory test:
A partner laboratory will normally act as an independent data controller for:
The laboratory’s own privacy policy, consent requirements and retention procedures will apply to those activities.
The laboratory used will depend on the test selected. Its identity will be shown on, or provided with, the relevant request form, consent documentation or booking information.
You may ask us to send your report, images or laboratory results to another person or organisation.
Before doing so, we may require:
We are not responsible for how an authorised recipient processes information after it has been lawfully disclosed to them.
Where possible, clinical information will be transmitted using secure electronic methods.
We aim to process and store personal information within the United Kingdom wherever reasonably possible.
Information may be processed outside the UK where:
Before transferring information outside the UK, we will consider the level of protection available and apply an appropriate lawful transfer mechanism where required.
This may include:
Information about safeguards relating to a specific transfer may be requested by contacting:
We retain information only for as long as it is required for clinical, legal, regulatory, financial or operational purposes.
Records will be reviewed before destruction.
A record may be retained beyond its standard period where:
Pregnancy, maternity and associated ultrasound records will normally be retained for:
25 years
This may include:
The retention period will normally begin at the end of the relevant pregnancy-related episode of care.
Adult clinical records not covered by another specialist retention period will normally be retained for:
8 years after the end of care or the last relevant appointment
This includes:
Where a clinical record concerns a child or young person, it will be retained for the period required by current healthcare records-management guidance.
Depending on the individual’s age when care ends, this may mean retaining the record until their 25th or 26th birthday or for another applicable minimum period.
Blood-test request forms, consent records, collection records and reports held by Miracle Inside will be retained according to:
Partner laboratories may apply their own retention periods to samples, request forms, raw testing information and laboratory reports.
Non-clinical booking and appointment records will normally be retained for up to:
7 years after the final appointment or transaction
Invoices, receipts, refunds and accounting records will normally be retained for:
6 years after the end of the relevant financial year
Complaint and incident records will normally be retained for:
7 years after closure
Records may be retained for longer where clinical, legal, regulatory, insurance or safeguarding considerations apply.
Serious incident records may require a longer retention period.
Records relating to a completed Subject Access Request will normally be retained for:
Website enquiries that do not become part of a booking, clinical record or complaint will normally be retained for up to:
24 months
Marketing contact information will be retained while you remain subscribed.
Where you opt out, we may retain a minimal suppression record so that your preference continues to be respected.
CCTV recordings will normally be retained for no longer than:
30 days
Footage may be kept for longer where it relates to an incident, complaint, safeguarding concern, investigation, insurance matter or legal proceeding.
At the end of the applicable retention period, information will be reviewed and then:
The NHS Records Management Code recommends eight years for general adult health records, including scans and imaging, and identifies a 25-year retention period for maternity records. It also requires records to be reviewed before destruction.
We use appropriate technical and organisational measures to protect information from:
Our measures may include:
No electronic or physical system can be guaranteed to be completely secure.
Where a personal-data breach occurs, we will assess it and notify the Information Commissioner’s Office and affected individuals where required by law.
We may contact you about Miracle Inside services where:
Booking a scan, test or other service does not automatically mean that you have agreed to receive all future marketing.
We will provide an appropriate opportunity to opt out where required.
We will not use detailed clinical findings, laboratory results or genetic information for general marketing.
You may stop receiving marketing communications at any time by:
Opting out of marketing will not prevent necessary service communications, including:
The electronic marketing soft opt-in may only be used where the applicable PECR requirements are satisfied, including offering a clear opportunity to opt out when contact details are collected and in each subsequent marketing message.
Cookies are small text files placed on a computer, tablet, telephone or other device when a website is visited.
Cookies and similar technologies may help a website:
These cookies are required for essential website functions, such as:
These cookies may operate without consent where permitted because the requested service cannot function properly without them.
These cookies may remember choices such as language, location or display preferences.
These cookies help us understand matters such as:
These cookies may be used to:
Where consent is required, non-essential cookies must not be placed on your device until you have made a clear choice.
Continuing to browse the website without making a positive choice will not, by itself, be treated as consent to non-essential cookies.
You should be able to:
You may also manage cookies using your browser settings. Blocking certain cookies may affect website, booking or payment functions.
ICO guidance requires consent before non-essential cookies are set and states that consent must involve a clear, informed and positive action.
Some website functions may be supplied by third parties, including:
These providers may place their own cookies or collect technical information under their own privacy policies.
The website’s cookie-preference tool should provide further information about the cookies currently in use, including their purpose and duration.
CCTV may operate in public areas for:
Appropriate signs will be displayed where CCTV is operating.
Access to CCTV recordings is restricted.
Footage will only be disclosed where there is a lawful reason, such as:
We may invite clients to provide feedback through external platforms or review services.
Where you submit a review directly to an external platform, that platform will process your information under its own privacy policy.
Review invitations sent following an appointment will be clearly distinguished from general marketing where appropriate.
We will not publish identifiable:
without appropriate permission.
Where you withdraw permission, we will stop future use where reasonably possible. Withdrawal may not enable us to retrieve printed material already distributed or information independently published by another organisation.
Miracle Inside has responsibilities concerning the safeguarding of:
Where we reasonably believe that someone is at risk of abuse, neglect or serious harm, relevant information may be shared with:
The information disclosed will be limited to what is relevant and proportionate.
The lawful bases may include:
Depending on the circumstances, you may have the following rights.
You have the right to receive clear information about how your personal information is collected and used.
You may request:
This is commonly known as a Subject Access Request.
You may ask us to correct inaccurate information or complete information that is incomplete.
Clinical findings and professional opinions will not normally be removed merely because you disagree with them.
Where appropriate, a correction, clarification or statement recording your disagreement may be added without altering the original clinical entry.
You may ask for your information to be deleted in certain circumstances.
This right is not absolute.
Clinical information may need to be retained for healthcare, legal, regulatory, professional, complaint, insurance or safeguarding purposes.
You may ask us to restrict how information is used while an issue concerning its accuracy or lawful use is being considered.
In certain circumstances, you may ask to receive information in a structured, commonly used and machine-readable format or ask for it to be transmitted to another controller.
You may object to processing based on legitimate interests.
You may object to direct marketing at any time.
You have rights relating to decisions made solely through automated processing where the decision produces a legal or similarly significant effect.
Miracle Inside does not routinely make clinical decisions solely through automated processing.
Where processing is based on consent, you may withdraw consent at any time.
Withdrawal:
Requests may be made verbally or in writing. Written requests should preferably be sent to:
You do not need to use a particular form or quote data-protection legislation.
We may ask for:
We will carry out a reasonable and proportionate search for the information requested.
We will normally respond without undue delay and within one month after receiving the request and any information reasonably required to confirm your identity, authority or the scope of the request.
The response period may be extended by up to two further months where permitted because a request is complex or numerous.
Where an extension is required, we will explain this within the initial response period.
There is normally no fee.
A reasonable administrative fee may be charged, or a request may be refused, where permitted by law, including where a request is manifestly unfounded or excessive.
Access to health information may be limited where a lawful exemption applies, including where disclosure is likely to cause serious harm to the physical or mental health of an individual or would improperly disclose confidential information about another person.
You may complain directly to Miracle Inside if you believe that:
Please send complaints to:
Please include “Data Protection Complaint” in the subject line.
We will:
We encourage you to contact Miracle Inside first so that we have an opportunity to investigate and resolve your concern.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Information about submitting a complaint is available through the Information Commissioner’s Office website.
We may update this Privacy and Cookie Policy to reflect:
The latest revision date will be displayed at the beginning of the policy.
Where a change is significant, we may provide additional notice through the website, booking communications or another appropriate method.
Previous versions may be requested by contacting:
Miracle Inside UK Ltd
Company number: 09484044
ICO registration reference: ZA297163
Miracle Inside UK Ltd is the parent company and the Care Quality Commission-registered provider responsible for Miracle Inside’s regulated diagnostic imaging services.
Miracle Inside Diagnostic Scan Clinic Ltd
Company number: 12262930
Miracle Inside Diagnostic Scan Clinic Ltd is involved primarily in blood-test, phlebotomy, laboratory-referral and associated diagnostic services.
35 Victoria Road
Brighouse
HD6 4DX
United Kingdom
Data-protection contact: Mr Godson Johnson
Data-rights and privacy email: GODSON@MIRACLEINSIDE.com
General enquiries: info@miracleinside.com
Website: www.miracleinside.com
Miracle Inside Cookie Policy
miracleinside.com places tiny text files called cookies onto your computer, tablet, or mobile device. This is standard practice for almost all websites.
Cookies are not harmful to your computer and are an essential part of online shopping. They allow us to give you a more efficient customer experience.
There are two main types of cookies: we call them "first-party" and "third-party" cookies.
First-party cookies are small data files that miracleinside.com uses for things such as keeping track of what you've put in your basket and remembering who you are when you return to our site. We don't save personal information such as credit card details in the cookies we create.
Third-party cookies are set on behalf of miracleinside.com. The most important of these are Google and Affiliate Windows, which display text or banner adverts on our behalf on several other reputable websites. These partner cookies don't collect personal data and would not be able to identify you as an individual customer.
On the whole, cookies are used:
If cookies aren't enabled on your computer, it will mean that your shopping experience on our website will be limited to browsing and researching; you won't be able to add products to your basket and buy them.
If you'd like to learn more about cookies in general and how to manage them, visit www.aboutcookies.org
WEBSITE OPERATED by Miracle Inside UK Ltd – Company Registration No. 09484044. Registered Office Address: No. 35, Victoria Road, HD6 4DX, Brighouse, West Yorkshire, United Kingdom. Contact no: 01132008760 or Email Miracle Inside. This e-mail address is protected from spambots.