1. Introduction

At Doctor Hub, your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our services, including the Doctor Hub website and mobile applications. We are committed to maintaining the privacy and confidentiality of your personal information in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Who We Are

Doctor Hub Services Ltd (“Doctor Hub”) is a digital healthcare provider that offers virtual consultations with healthcare professionals, including GMC-licensed general practitioners (GPs) and specialists. We aim to deliver high-quality, accessible, and convenient healthcare through our secure telehealth platform.

3. Data We Collect

We collect various types of information in order to provide effective healthcare services. This includes but not limited to:

• Personal Identification Information: Name, date of birth, gender, email address, telephone number, postal address, and identity verification documents.
• Health Information: Medical history, symptoms, prescribed treatments, and any other health-related information you provide during consultations.
• Technical Information: Information about the devices you use to access our services, including IP address, browser type, operating system, and device identifiers.

Usage Information: Data on how you interact with our platform, including login times, page visits, and other activities related to the use of our services.

4. How We Use Your Data

Your personal data is used to:

• Provide Healthcare Services: Facilitate medical consultations, issue prescriptions, manage follow-ups, and deliver personalised healthcare.
• Identity Verification: Verify your identity through third-party services (e.g., Veriff) to ensure the security of your account and prevent fraud.
• Improve Our Services: Monitor and analyse user activity to improve the quality, functionality, and user experience of our platform.
• Communication: Send notifications, appointment reminders, service updates, and respond to any inquiries you may have.
• Legal Compliance: Fulfil our legal obligations, including regulatory requirements for healthcare services.

5. Legal Basis for Processing Data

We process your personal data based on one or more of the following legal bases:

• Consent: Where you have given explicit consent for us to process your data for specific purposes. This consent will remain in effect unless you withdraw it in writing.
• Performance of a Contract: To provide our healthcare services as agreed in our Terms and Conditions.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interests: To improve our services, ensure platform security, and provide a positive user experience.

6. Data Sharing

We may share your personal data with:

• Healthcare Providers: Licensed professionals, such as GPs and mental health specialists, involved in your treatment and care.
• Third-Party Service Providers: Companies that support us in providing our services, including identity verification, IT support, data storage, payment processing, and pathology and radiology services. Please note that these third-party providers may operate under their own privacy policies, which you may wish to review.
• Regulatory Authorities: When required by law, we may disclose information to health authorities, regulatory bodies, or other entities.

All third-party providers are bound by confidentiality obligations and are only authorised to use your personal data as necessary to provide these services.

7. Data Secury

We employ strict security measures to protect your personal data, including:

• Encryption: All data transmissions are encrypted to protect against unauthorised access.
• Access Controls: Only authorised healthcare professionals and staff have access to your personal information, strictly on a need-to-know basis as required for clinical care.

We recommend that you maintain the confidentiality of your login credentials to protect your personal data and prevent unauthorised access.

• Data Monitoring: Regular audits and monitoring are conducted to ensure compliance with data protection standards.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, including providing our healthcare services and complying with legal obligations. Once your data is no longer required, it will be securely deleted or anonymised.What rights you have over your data

Suggested text: If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

9. Your Rights

You have several rights under data protection law concerning your personal data, including:

• Access: The right to request access to your personal data held by us.
• Correction: The right to request correction of inaccurate or incomplete personal information.
• Lodge a Complaint: The right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe that your data is not being handled in accordance with the law.
• Deletion: The right to request the deletion of your personal data under certain circumstances.
• Restriction: The right to request that we limit the processing of your data.
• Portability: The right to request a copy of your data in a structured, commonly used, and machine-readable format.
• Objection: The right to object to the processing of your data in specific situations.

To exercise any of these rights, please contact us using the details provided in Section 11.

10. Cookies

Our website uses cookies to enhance the user experience, analyse performance, and provide personalised content. For more information on how we use cookies, please refer to our Cookie Policy.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or wish to exercise your rights, please contact us at:

• Email: enquires@doctor-hub.co.uk
• Postal Address: Doctor Hub Services Ltd, 86-90 Paul Street, London EC2A 4NH, United Kingdom

We strive to respond to all privacy-related inquiries promptly and address any concerns you may have.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any significant changes through email or platform notifications.

13. Governing Law

This Privacy Policy is governed by the laws of England and Wales. Any disputes arising from the use of your personal data shall be subject to the exclusive jurisdiction of the courts of England and Wales.