1. Introduction
Revive and Reset (“we,” “our,” or “us”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
We are registered with the Information Commissioner’s Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
Personal Information
- Name, address, phone number, and email address
- Date of birth and NHS number
- Emergency contact information
- Payment and billing information
Medical Information
- Medical history and current health conditions
- Symptoms, test results, and treatment records
- Medication history and allergies
- Consultation notes and treatment plans
Website Usage Information
- IP address, browser type, and device information
- Pages visited and time spent on our website
- Cookies and similar tracking technologies
3. How We Use Your Information
Medical Care
- Providing medical consultations and treatments
- Monitoring your health and treatment progress
- Coordinating care with other healthcare providers
- Maintaining accurate medical records
Administrative Purposes
- Scheduling appointments and sending reminders
- Processing payments and insurance claims
- Responding to your inquiries and requests
- Improving our services and website functionality
Legal and Regulatory Compliance
- Meeting legal and regulatory requirements
- Protecting against fraud and ensuring security
- Responding to legal requests and investigations
4. Legal Basis for Processing
We process your personal information based on the following lawful bases:
- Vital interests: When necessary to protect your life or health
- Public task: For the provision of healthcare services
- Legitimate interests: For clinic administration and service improvement
- Consent: For marketing communications (where you have opted in)
- Contract: To fulfill our obligations under our service agreement
- Legal obligation: To comply with healthcare regulations and legal requirements
5. Information Sharing and Disclosure
We may share your information with:
- Healthcare professionals: Your GP, specialists, or other healthcare providers involved in your care
- Service providers: Third-party companies that help us operate our business (e.g., IT support, payment processors)
- Legal authorities: When required by law or to protect public health and safety
- Insurance companies: For processing insurance claims (with your consent)
We never sell your personal information to third parties for marketing purposes.
6. Data Security
We implement robust security measures to protect your information:
- Encrypted data transmission and storage
- Secure, password-protected systems
- Regular security audits and updates
- Staff training on data protection and confidentiality
- Physical security measures at our clinic premises
Despite our efforts, no electronic transmission or storage system is 100% secure. We cannot guarantee absolute security but take all reasonable steps to protect your data.
7. Data Retention
We retain your information for different periods depending on its type:
- Medical records: As required by professional guidelines and legal requirements (typically 8+ years)
- Appointment and billing records: 7 years from last treatment
- Website analytics: 26 months
- Marketing consent: Until you withdraw consent or 3 years of inactivity
We securely delete or anonymise information when it is no longer needed.
8. Your Rights
Under UK GDPR, you have the following rights:
- Right of access: Request a copy of your personal information
- Right to rectification: Correct inaccurate or incomplete information
- Right to erasure: Request deletion of your information (subject to legal requirements)
- Right to restrict processing: Limit how we use your information
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to certain types of processing
- Rights related to automated decision-making: Protection against purely automated decisions
To exercise any of these rights, please contact us using the details provided below.
9. Cookies and Website Analytics
Our website uses cookies and similar technologies to keep the site working, remember your preferences, understand how the site is used, and measure our advertising.
When you first visit, you can choose which categories to accept. You can change your choice at any time using the cookie settings icon that appears on every page except legal pages like this one. Only essential cookies are set before you choose.
We use Google Analytics to understand how people find and use the site, Hotjar to see how pages are used so we can improve them, and Google Ads to measure which adverts lead to enquiries. If you make an online booking, our management system (Semble) and Stripe, the accompanying payments processor, may also use cookies. Google and Stripe use this data both to provide their services to us and for their own purposes, as set out in their privacy policies. Semble and Hotjar use it only on our instructions.
Call tracking. If you reach our website by clicking one of our Google adverts and you have accepted advertising cookies, the phone number shown in our menus and contact panels is replaced with a temporary number supplied by Google. Calls to that number connect to our clinic line and are answered by our team as usual. Google tells us the time, length and origin of the call so we can see which adverts lead to enquiries. The number listed in section 12 of this policy is always our direct line.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any websites you visit through our links.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending you an email notification (if we have your email address)
- Displaying a notice on our website
The updated policy will take effect 30 days after we post it, unless otherwise specified.
12. Contact Information
If you have questions about this Privacy Policy or want to exercise your rights, please contact us:
Revive and Reset
77 Hallam Street,
London, W1W 5HB
Phone: 020 8138 4127
Email: [email protected]
Data Protection Officer:
Email: [email protected]
If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
ICO Website: ico.org.uk
ICO Helpline: 0303 123 1113