Privacy notice

Who we are

Renvo [to confirm] (company number [to confirm]) is the data controller for the information described in this notice. Our registered address is [to confirm].

We are registered with the Information Commissioner's Office under reference [to confirm].

If you have a question about this notice, contact us at [to confirm].

The information we collect

When you enquire or book, we collect your name, date of birth and contact details. For some services we also ask a short set of clinical questions before your appointment.

When you become a patient, we hold information about your care: the service you are being treated for, your consultations, any prescriptions issued, and your review schedule.

Information about your health is special category data under UK data protection law. We treat it accordingly and hold it only where we need it to provide your care.

We also collect basic technical information when you use the website, such as your IP address and the pages you visit. See our cookie notice for detail.

Why we use it, and our lawful basis

To provide your care and manage your treatment. Our lawful basis is the performance of a contract with you, and for health information, the provision of health care under Article 9(2)(h) UK GDPR.

To contact you about your care — including when a review or repeat prescription is due. This is part of providing your care, not marketing, and you cannot opt out of it while you are under our care.

To meet our legal and regulatory obligations, including clinical record-keeping requirements.

To send you marketing about other services, only where you have given consent. You can withdraw that consent at any time without affecting your care.

Who we share it with

Our clinical record system, which holds your medical records.

Our dispensing partner, where your clinician issues a prescription. They receive only what they need to supply your medication.

Our payment provider, where you pay for treatment. We do not store your card details.

Suppliers who help us operate the service, such as hosting and messaging providers, under contracts that limit what they may do with your information.

We never sell your personal information.

How long we keep it

Clinical records are kept for the period required by UK records-management guidance for private healthcare providers. [to confirm] — the specific retention periods should be confirmed against your records-management policy.

Enquiries that do not become patients are kept for a shorter period and then deleted.

Marketing consent records are kept for as long as you remain subscribed, plus a period afterwards so we can evidence that consent was given.

Keeping it secure

Access to patient information is limited to staff who need it to do their job, and every account is individually permissioned.

Information is encrypted in transit, and we keep records of who has accessed what.

Your rights

You have the right to ask for a copy of the information we hold about you, to have it corrected if it is wrong, and in some circumstances to ask us to delete it or restrict how we use it.

You can object to processing, ask us to transfer your information to another provider, and withdraw consent to marketing at any time.

Some rights are limited where we have a legal obligation to keep clinical records. We will explain if that applies.

To exercise any of these, contact [to confirm]. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.

Changes to this notice

We may update this notice. The date at the top shows when it was last changed. This version is dated 4 September 2026.