How we look after your information.

The data controller is DRV Clinic Ltd, trading as Dr Vahe Clinic, a CQC-registered private medical clinic.

• Address: 25 Ives Street, Chelsea, London SW3 2ND
• Phone: 020 3370 3503
• Email: info@drvaheclinic.com
• DRV Clinic Ltd is registered with the Information Commissioner's Office (ICO), registration number ZB189528.

If you have any question about this notice or your information, contact us using the details above.

• Contact details — your name, email address and phone number when you book, enquire or ask for our guide.
• Your message — anything you choose to tell us in an enquiry form or by email, phone or WhatsApp.
• Health questionnaire information — your medical history, medications, lifestyle and goals, collected before your assessment.
• Test results — blood test results and any other measurements taken during your assessment or add-on tests, plus your doctor's notes and plan.
• Booking and payment records — appointment details and confirmation of payment. We do not see or store your full card details.
• Website usage — if you accept analytics cookies, information about how you use this site (pages visited, device type, approximate location).

Health information is "special category" data under UK GDPR, which means it gets extra protection. Only the clinical team who need it to care for you can see it.

Data protection law requires us to have a valid reason (a "lawful basis") for each use:

• Contract — to book and deliver your assessment, send results and arrange follow-up care.
• Explicit consent — to collect and use your health questionnaire answers and test results. You give this consent before your assessment, and you can withdraw it at any time, although we may then be unable to provide the service.
• Consent — to send you our guide or marketing emails, and to use analytics cookies. You can withdraw consent at any time.
• Legitimate interests — to reply to enquiries, run and improve the clinic, keep our systems secure and handle complaints, where this doesn't override your rights.

We also keep clinical records because we are legally required to as a regulated healthcare provider.

We never sell your information. We share it only with trusted organisations that help us run the service, under contracts that require them to keep it safe:

• Pabau — our online booking and clinical records system.
• Partner laboratories — UK-accredited laboratories that analyse your samples and return results to us.
• Klarna — if you choose to pay with Klarna, they process your payment and may run their own checks under their own privacy notice.
• Google Analytics — only if you accept analytics cookies, to help us understand how the site is used.
• Our website hosting and email delivery providers, which store enquiry form submissions and send our emails.

With your agreement, we may also share a summary of your results with your GP. We will share information without your consent only where the law requires it or to protect someone from serious harm.

Some providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK-approved contract terms.

• Clinical records — kept in line with the NHS Records Management Code of Practice, which sets minimum periods for adult health records.
• Marketing data — kept until you withdraw your consent or unsubscribe.
• Enquiries that don't lead to an appointment — kept only as long as needed to respond and follow up.

Under UK GDPR you have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information (we may need to keep clinical records by law);
• ask us to limit how we use your information, or object to how we use it;
• ask us to send your information to you or another organisation in a usable format;
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, contact us on 020 3370 3503 or at info@drvaheclinic.com. We will respond within one month and there is normally no charge.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies are small files stored by your browser. When you first visit, we ask whether you accept analytics cookies.

• Essential — needed for the site to work, including remembering your cookie choice (stored in your browser's local storage). These are always on.
• Analytics (only if you accept) — Google Analytics and Google Tag Manager, which set cookies such as _ga to count visits and see which pages are useful. They do not load at all unless you click Accept.

Our booking pages are run by Pabau and Klarna checkout is run by Klarna; they may set their own cookies, covered by their own policies.

You can change your choice at any time using Cookie settings in the footer of every page, or by clearing your browser's site data.

We may update this notice from time to time. The date at the top shows when it last changed. See also our Terms of Service.