Consultation Form

Call : 07386 970 813

Privacy Policy

We respect your privacy. This policy explains how we collect, use and protect your personal data when you visit our website, contact us, book appointments, or receive clinical services (IV drips, IM/IV pushes, blood tests and related care). We aim to be clear and practical — if anything here isn’t clear, please contact us (details at the end).

Who we are / Data controller

  • The organisation operating this website and providing clinical services (referred to as “we”, “us”, “our” in this policy) is the data controller for the personal data you provide to us.
  • Clinic name/trading name: IV Drips Birmingham
  • Address: Bradford Court Business Centre, 123-131 Bradford Street, Birmingham, B12 0NS
    Email: hello@ivdripbirmingham.co.uk
    Phone: +44 7386 970 813
  • These Terms apply to all bookings, purchases and clinic visits. They do not replace clinical advice from your GP or specialist.

Summary

  • We collect contact details, basic medical information, and records related to the services you receive.
  • We use this data to provide care, process bookings and payments, communicate results, and improve services.
  • Sometimes we share data with trusted third parties (accredited labs, payment processors, IT providers) to deliver the service.
  • We keep data secure and only for as long as necessary.
  • You have rights over your data (access, rectification, erasure, restriction, portability, and object). See Section 10 for how to exercise them.

What personal data we collect

a) Contact & identity information

  • Name, date of birth, postal address, telephone number(s), email address, and emergency contact.

b) Booking and administrative data

  • Appointment dates/times, notes about cancellations/rescheduling, payment, invoices and receipts, booking communications.

c) Health and clinical data (special category)

  • Medical history, medications, allergies, symptoms, clinical assessments, blood test results, treatment records, consent forms, clinical notes, referral information. This is sensitive health data and is treated with extra care.

d) Technical and website data

  • IP address, browser and device information, pages visited, interaction data from analytics cookies (see our Cookie Policy).

e) Marketing preferences

  • Consent to receive newsletters, promotional offers, or clinic updates and your communication preferences.

How we collect data

  • Directly from you: when you book, register, complete forms, attend appointments, email or call us.
  • From healthcare professionals: with your consent or as part of your care (e.g., GP, specialists).
  • From third parties: accredited laboratories that process samples, payment processors, or trusted service providers.
  • Automatically: via cookies and analytics when you use the website (see our Cookie Policy for details).

5. Why we use your data and our lawful bases

We only use your personal data where we have a lawful basis under UK data protection law. Typical lawful bases we rely on include:

a) To perform a contract (contractual necessity)

  • When you book a service with us, we use your data to deliver it (bookings, appointments, tests, treatments, billing).

b) Consent

  • For optional services (marketing emails, some non-essential communications), we will obtain your consent. You can withdraw consent at any time.

c) Legal obligations

  • To comply with legal or regulatory duties (for example, reporting certain infections to public health authorities where required).

d) Legitimate interests

  • For day-to-day business operations (improving services, fraud prevention, IT security), balanced against your privacy rights. We never rely on legitimate interests to process health data.

e) Necessary for healthcare and public health

  • Health information is a special category under data protection law. We process health data where necessary for the provision of healthcare, for medical diagnosis, or with your explicit consent. This is typically the lawful basis for clinical records and test results.

6. How we use health data

Health data is treated as highly sensitive. We will only process it where necessary to provide care, such as:
  • Delivering clinical services, tests and treatments.
  • Sharing results and clinical notes with you, your GP, or other clinicians if you ask us to or if it is necessary for your care.
  • Managing care pathways, referrals and follow-up.
  • Monitoring quality and clinical governance (in anonymised form where possible). We will usually rely on the lawful basis of provision of healthcare and/or your explicit consent for these activities.

Who we share data with

To deliver services, we sometimes share your data with trusted third parties. Examples include:
  • Accredited laboratories — to analyse blood samples and return test results.
  • Payment processors — to process card/payments (we do not store full card numbers).
  • IT & software providers — appointment systems, secure messaging, electronic patient records, analytics (data minimised and secured).
  • Healthcare professionals — your GP, specialists or allied clinicians, when clinically necessary or if you request we share results.
  • Regulators and emergency services — where required by law or in a clinical emergency.
  • Professional advisers — where needed for legal, regulatory, or audit purposes.
We only share the minimum data necessary, ensure data processing agreements are in place, and choose providers that meet UK/EU data protection standards.

How long we keep your data

We retain personal data only for as long as necessary for the purposes set out above and to meet legal or professional obligations. Typical retention periods (subject to professional guidance and legal requirements):
  • Clinical records and test results: typically retained for a minimum of 8 years for adults; for children, we retainthem until they reach 25 (or 8 years after last contact, whichever is longer), unless other clinical guidelines require longer retention.
  • Booking/payment records: typically retained for 7 years for accounting and tax purposes.
  • Marketing consent/preferences: remain in effect until you withdraw consent.
  • Website analytics and cookies: retention depends on the cookie provider (see the Cookie Policy).
If you want to request earlier deletion, see “Your rights” below — note that deleting clinical records may limit our ability to provide follow-up care or meet legal obligations.

Your rights

Under data protection law, you have rights in relation to your personal data. These include:
  • Access – you can ask for a copy of the personal data we hold about you.
  • Rectification – you can ask us to correct inaccurate or incomplete information.
  • Erasure (“right to be forgotten”) – in certain circumstances, you can request deletion. This is subject to legal and clinical obligations (e.g., medical record retention).
  • Restrict processing – you can ask us to limit how we use your data in specific situations.
  • Data portability – where applicable, you can request a machine-readable copy of data you provided to us.
  • Object – you can object to certain processing, including direct marketing.
  • Withdraw consent – where processing relies on consent, you can withdraw it at any time (this does not affect processing up to the withdrawal date).
  • Complain – you have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Marketing communications

  • We will only send marketing messages (email, SMS) where you have given consent or where we have a legitimate interest and reasonable expectation of contact (e.g., follow-up appointment reminders may be sent). You can opt out of marketing at any time by clicking “unsubscribe” in emails or contacting us. Opting out does not prevent us from sending necessary transactional messages (appointment confirmations, test results).

Security

  • We take reasonable technical and organisational measures to protect your personal information, including encryption for data in transit, secure backups, access controls, and staff training on data protection. While we strive to protect your data, no system is completely risk-free. If we become aware of a data breach that poses a high risk to your rights and freedoms, we will notify you and the ICO as required by law.

Children & vulnerable people

  • Our services are not designed for children under 16 without parental or guardian consent. If you are booking for a child or vulnerable adult, we will ask for parent/guardian details and proof of consent. We take extra care when processing data for vulnerable people; please tell us if you have any special requirements.

Automated decision-making and profiling

  • We do not make decisions about your care using automated processing that has legal or similarly significant effects. Clinical decisions are always made by qualified clinicians. We may use non-decision-making analytics to help improve our website and services (e.g., aggregated site usage), but this does not affect your care.

Links to other websites

  • Our site may link to third-party websites (partners, labs, booking platforms). This Privacy Policy does not cover those sites. Please read their privacy information before submitting personal data to them.

Cookies and similar technologies

  • We use cookies to make the site work and to gather analytics. For full details, see our Cookie Policy. You can manage cookie settings via the banner or your browser.

Changes to this policy

  • We may update this Privacy Policy from time to time. When we make material changes, we’ll update the “Last updated” date and, where appropriate, notify recent patients. Please check this page occasionally to stay informed.

Complaints & ICO

  • If you are unhappy with how we handle your data, please contact us first so we can work to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO):
Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Website: https://ico.org.uk/
Phone: 0303 123 1113 (check ICO site for latest contact numbers)

Contact us

If you have any questions about this Privacy Policy, want to exercise your rights, request your data, or ask for further details about data sharing or retention, contact:

Data protection contact
Email: hello@ivdripbirmingham.co.uk
Post: Bradford Court Business Centre, 123-131 Bradford Street, Birmingham, B12 0NS
Phone: +44 7386 970 813

If you would like a vendor-specific cookie list or details of the international transfer safeguards we use, please ask, and we’ll provide a current export.