Privacy Policy

Privacy Notice

Dr George Evetts – Aviation Medical Examiner
Winchester Aviation Medicine
Clinics held at Sarum Road Hospital, part of Circle Health Group

Commitment to Data Protection

Keeping your personal data safe is of vital importance.
I comply fully with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all professional standards of medical confidentiality.

I am registered with the Information Commissioner’s Office (ICO), which provides guidance on managing personal data and acts as the UK regulator for data protection and privacy.
More information: https://ico.org.uk/about-the-ico/what-we-do/

Data Controller and Processor Relationship

For all aeromedical data, the UK Civil Aviation Authority (CAA) is the Data Controller.
As an Aviation Medical Examiner (AME), I act as a Data Processor on behalf of the CAA.

All aeromedical data is processed exclusively through the CAA’s secure medical database system, Cellma.
Aeromedical data cannot lawfully be processed, stored, or transmitted via any other platform.

The CAA determines the purpose and means of processing your aeromedical data, and I operate strictly within their regulatory and data protection framework.

For further information, please refer to the CAA’s Privacy Notice:
🔗 https://www.caa.co.uk/our-work/about-us/general-privacy-notice/

Information I Collect

In carrying out my role as an AME, I collect only the information required to complete your aviation medical examination and certification under the authority of the CAA.

This includes:

Personal details (name, date of birth, contact details, CAA reference number)

Relevant medical history and health information

Clinical notes, examination results, and correspondence relevant to your medical certification

How Your Information Is Used

Your information is used solely to:

Assess medical fitness for aviation duties

Complete required medical certification forms within the CAA’s Cellma system

Maintain accurate medical records as required by the CAA

Communicate with you and, where necessary, with other healthcare professionals involved in your care

Sharing of Information

Your aeromedical data is shared directly and securely with the CAA via the Cellma system.
I will never share your data with any third party without a legitimate reason to do so, and only with your consent unless required by law.

Where care or administrative processes involve other organisations — such as Circle Health Group (for clinics held at Sarum Road Hospital) — only minimal necessary personal or appointment information may be shared for operational purposes.
Aeromedical data is never shared outside the CAA’s Cellma system.

You can review the relevant privacy notices here:

Civil Aviation Authority Privacy Notice: https://www.caa.co.uk/our-work/about-us/general-privacy-notice/

Circle Health Group Privacy Notice: https://www.circlehealthgroup.co.uk/privacy-notices

How Long Information Is Kept

Your aeromedical data is retained in accordance with CAA policy and retention schedules within the Cellma system.
Any local administrative records held outside Cellma (for example, appointment records) will be kept only for as long as necessary for administrative and legal purposes.

Your Rights

Under UK data protection law, you have the right to:

Access the information held about you by the CAA

Request correction of inaccurate or incomplete information

Request restriction of processing (where applicable)

Lodge a complaint with the Information Commissioner’s Office (ICO) if you are dissatisfied with how your data is handled

Requests relating to aeromedical data should be directed to the Civil Aviation Authority, as the Data Controller.

Accessing Your Data

For general queries or access requests relating to non-aeromedical data held by Winchester Aviation Medicine, please contact:
📧 DSAR@winchester-ame.com

For access to aeromedical records, please contact the Civil Aviation Authority directly:
📧 Medical Department – Civil Aviation Authority
🔗 https://www.caa.co.uk

Data Controller and Processor

Data Controller (Aeromedical Data): Civil Aviation Authority (CAA)

Data Processor (Aeromedical Data): Dr George Evetts, Aviation Medical Examiner – Winchester Aviation Medicine

Clinics Held At: Sarum Road Hospital, part of Circle Health Group