Privacy policy

Draft for review. Have this checked before launch, particularly the sections on health information.

Who we are

The IVy (legal entity name, company number if any) is the data controller for personal information collected through this website and our services. ICO registration number: ICO number. Contact: hello@example.co.uk.

This website

This website does not use cookies, analytics or tracking, and has no forms. Our hosting provider may keep standard server logs, such as IP addresses, for security purposes.

Information you give us

When you call, message or email us, we receive your name, contact details and anything you choose to tell us. We use this to reply and arrange your appointment.

Health information

To treat you safely we need information about your health, such as medical history, medicines and allergies. This is special category data under UK GDPR. We process it to provide healthcare to you (Article 9(2)(h)), keep it confidential and secure, and only share it where needed for your care, for example with a prescriber or the laboratory analysing your sample, or where the law requires it.

How long we keep it

Retention period for clinical records, in line with professional guidance.

Your rights

You can ask for a copy of your information, ask us to correct it, and in some cases ask us to delete or restrict it. Contact us at the address above. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.