Privacy & Clinical Data Charter

Your privacy and medical confidentiality are fundamental to the care we provide. We handle your personal and health information with strict clinical safeguards, ensuring complete compliance with UK data protection laws (including the UK GDPR and the Data Protection Act 2018).

Key Takeaways

• Clinical Necessity: Your data is gathered primarily to assess medical suitability, prescribe safely, and deliver your care.

• Special Category Protection: Medical records are classified as Special Category Data and held under enhanced security standards.

• Secure & Confidential: We implement strict technical and operational controls; your records are only accessible to authorised clinical and operations staff.

• No Unauthorised Sharing: We never sell your personal data or use your medical history for unrelated commercial activities.

What Information We Collect

To ensure your treatment is clinically safe and seamlessly delivered, we collect:

1. Identity & Contact Details

• Full legal name, date of birth, biological sex, and gender identity.

• Contact information: delivery address, billing address, phone number, and email address.

• Identity verification documentation where legally or clinically mandated.

2. Clinical & Health Information (Special Category Data)

• Medical consultation responses, lifestyle disclosures, and biometric records (e.g., height, weight, BMI).

• Medical history, existing conditions, allergies, and concurrent medications.

• Prescribing histories, clinical notes, treatment plans, and clinician correspondence.

• Side-effect reports, follow-up questionnaires, and support interactions.

3. Transaction & Technical Data

• Order histories, dispatch tracking references, and order statuses.

• Transaction confirmation records (we do not store full payment card details; all financial processing is handled by secure, PCI-DSS-compliant payment gateways).

• Technical connection details (IP address, browser type, and platform access logs) to maintain account security and prevent fraud.

How We Use Your Information

Your information is processed strictly where necessary and lawful across three primary domains:

• Direct Clinical Care & Safety:

  • Enabling prescribers and clinicians to evaluate medical eligibility and identify contraindications.

  • Titrating, adjusting, and safely monitoring your active treatment plan.

  • Performing clinical audits and pharmacovigilance (monitoring treatment safety and adverse reactions).

• Pharmacy Operations & Dispensing:

  • Transmitting verified prescriptions to our registered dispensing partner pharmacies.

  • Fulfilling, packaging, and dispatching your medication via secure, tracked courier services.

  • Communicating logistical updates, delivery schedules, and customer support resolutions.

• Regulatory Compliance & Good Practice:

  • Meeting mandatory healthcare standards set by regulatory authorities (such as the GPhC and CQC).

  • Retaining accurate medical records in accordance with statutory UK retention schedules.

  • Coordinating with your registered NHS GP where clinical guidelines recommend or require continuity of care.

Lawful Grounds for Processing

Under UK data protection law, we process your information using specific legal bases:

• Article 6 (Standard Data):

  • Contractual Necessity: To provide the online healthcare services, account management, and orders you request.

  • Legal Obligation: To satisfy statutory pharmacy, clinical, accounting, and tax compliance requirements.

  • Legitimate Interests: To protect our digital systems, prevent fraudulent activity, and maintain high standards of patient care.

• Article 9 (Health & Special Category Data):

  • Provision of Healthcare: Processing is necessary for the purposes of preventive or occupational medicine, medical diagnosis, and the provision of health treatment (Article 9(2)(h)).

Security, Retention & Confidentiality

• Technical Safeguards: All data transmission is secured using industry-standard TLS/SSL encryption, with medical databases stored in secure, restricted-access cloud environments.

• Access Control: Only licensed prescribers, verified pharmacists, and directly designated support staff are granted role-based access to your clinical record.

• Statutory Retention: Because we provide healthcare, clinical regulations require us to retain your medical consultation and prescribing records for defined statutory periods, even if an account is paused or deactivated.

Your Individual Rights

Subject to clinical record-keeping exceptions, you have the right to:

• Access: Request a copy of the personal and medical data we hold about you (Subject Access Request).

• Rectification: Request corrections to any outdated or inaccurate administrative information.

• Restriction & Portability: Request restrictions on certain non-clinical data processing or obtain your records in a structured format.

For questions regarding how your records are maintained, or to exercise any data subject rights, please contact our Data Protection Team at Info@rightangled.co.