Privacy and cookies policy

We are committed to protecting the privacy of all individuals using this website and our services.

The following statement is the Privacy Policy of Preventicum UK Limited. Preventicum UK Limited is part of the InHealth Group, which includes InHealth Limited, a company registered in England and Wales under company number 05190234 with its registered office at Burnham Yard, London End, Beaconsfield, Buckinghamshire, England, HP9 2JH.

This Privacy Policy sets out how and why we may collect and use your personal data including when you are using the Preventicum website. Preventicum owns and operates this website.

‍

Introduction and general terms

We are committed to protecting and respecting your privacy and ask that you read this notice carefully. It explains when and why we collect personal data about you, how we use it, the conditions under which we may disclose it and how we keep it secure.

‍

Who are we?

We are Preventicum UK Limited, a company registered in England and Wales under company number 05149731 with our registered office at Burnham Yard, London End, Beaconsfield, Buckinghamshire, England, HP9 2JH.

‍

What type of personal data do we collect and how do we do it?

Personal data is any information that relates to you and can be used to identify you.

We may collect and process personal data when you engage with us including:

When you use our website, including filling in forms;
When you communicate with us about our services;
In the course of receiving services, such as providing information to our staff or responding to requests from staff during a scan; and/or
If you respond to a request from us to a survey or send us feedback.

‍

The types of personal data that we may collect from you include the following:

Name and contact information such as email, address and phone number.
Account login details.
Information related to your job if it is relevant to your care and treatment.
Details of the services you have accessed.
Bank details.
Treatment notes and reports about your health and any treatment you have received.
Your feedback and treatment outcome information.
Information surrounding complaints and incidents which may have arisen.
Recordings of calls, inbound and outbound.
Any other personal information we collect in the ordinary course of providing our services, in operating our business or in connection with your enquiry or healthcare pathway.

‍

We collect personal data about you so that we can:

Identify you;
Manage your enquiry;
Deliver and tailor our services to you;
Create and manage your account with us;
Improve our services by research and statistical analysis; and
Carry out medical research when we have your consent.

Information about your health, racial or ethnic origin, genetic and biometric data and sexual orientation is classified as ‘special category data’. We will only process this information on the basis that it is necessary for medical diagnosis, the provision of healthcare services, or with your consent.

‍

If you give us data on behalf of someone else, you confirm that the other person has appointed you to act on their behalf and has agreed that you can:

Give consent on their behalf to the processing of their personal data; and
Receive on their behalf any data protection notices.

‍

Most of the personal data we process is provided to us directly by you. However, sometimes we will receive personal data and special category personal data from third parties, for example an employer, member of staff or relative.

In these cases, you will typically have consented to the sharing of your personal data by such persons for the purpose of your treatment. We may share this data with such persons or third parties as are necessary to enable your healthcare to be delivered.

Under data protection legislation (including the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR)), we may only process your personal data if one of the following lawful bases applies, which will be considered on an individual basis.

(a) We have your consent.

(b) We have a contractual obligation with you that requires us to process your personal data.

(d) We need to protect your vital interests.

(e) We need it to perform a public task.

(f) We have a legitimate interest to process your personal data.

We process your personal data in accordance with Article 6(1)(b) of the UK GDPR where processing is necessary for the performance of a contract with you for the delivery of our healthcare services to you. For example, if you have contracted with us for the delivery of one of our health assessments, we need to process your personal data to be able to deliver this service to you.

Where we process special category data, such as health-related or genetic data, for performing a contract with you for the delivery of our healthcare services, we rely on Article 9(2)(h) of the UK GDPR which permits processing where it is necessary for medical diagnosis, the provision of healthcare or treatment or the management of healthcare systems and services. This processing is carried out by, or under the responsibility of, a health professional or another person subject to a duty of confidentiality.

We may also process your personal data in accordance with Article 6(1)(a) of the UK GDPR where we have your consent to process your personal data. In this respect we ask for your consent for your personal data to be included in our database for two different purposes:

For our own research purposes to understand service utilisation, operational performance, patient pathways and clinical trends. This allows us to improve the efficiency and quality of the services we provide to you.
For scientific research projects to be undertaken in the future, either by us or third parties.

Where we process special category data, such as health-related and genetic data, for the above research purposes, we rely on Article 9(2)(a) of the UK GDPR which permits processing where we have your consent.

‍

What do we do with the information we have?

We process your data for some or all of the following reasons:

For the purpose of providing your treatment;
Compliance with legal, regulatory and corporate governance obligations and good practice;
Gathering information as part of inspections by regulatory bodies or legal proceedings or requests;
Operational reasons, such as recording services, training, and quality control;
Staff administration and assessments, monitoring staff conduct, disciplinary matters;
Improving our services by conducting statistical analysis and research;
Enabling us to meet your healthcare pathway generally; and/or
For scientific research projects helping to advance medical knowledge and treatments.

When we process your data for research purposes we take steps to anonymise or pseudonymise your data to keep your data as secure as possible. When data is anonymised, all personal identifiers are removed from the dataset and it is no longer possible to link you to the underlying information. In some cases, it is not possible to fully anonymise your data because we need to ensure that data contained in the research dataset is accurate or because we need to be able to trace data back to individuals. Where this is the case, we take steps to mask your identifiable information (pseudonymisation), with only authorised personnel having access to the ‘key’ which enables data to be re-identified.

‍

Monitoring and recording communications

We may monitor and record communications with you (such as telephone conversations and emails) for quality assurance, training, fraud prevention, and compliance purposes.

‍

Marketing

We may use your contact details to send you information, via email, about service updates, health insights, relevant services and any other updates related to the services you have purchased and which we think may be of interest to you.

You can opt-out of these communications or update your preferences at any time by contacting us or by clicking the unsubscribe button in any communication sent by us.

‍

How is your personal data used and stored?

Your personal data is securely stored on locations which are strictly governed by our data security framework. This provides appropriate organisational and technical security measures to prevent unauthorised access or unlawful processing of your personal data and to prevent personal data being lost, destroyed or damaged. We continually strive to ensure our data security framework offers a robust defence against breaches of data security including through audits. InHealth Group is accredited with ISO9001 Quality Management System and ISO27001 Information Security Management Standard.

‍

Your personal data will not be transferred outside the UK unless:

The country or territory (such as the European Economic Area) is deemed by the UK government to provide an adequate level of protection for personal data; or
One of the mechanisms set out in the legislation has been put in place, e.g. where one of the ‘appropriate safeguards’ listed in data protection legislation has been put in place or a specific exception applies.

Where you have provided your consent for your personal data to be stored on our research database, limited authorised processing activities are undertaken by Infotech Consulting Martin Kopp based in Switzerland. Switzerland is recognised by the UK as providing an adequate level of protection for personal data under the UK GDPR adequacy regulations.

All international processing activities shall be subject to contractual controls, confidentiality obligations, encryption protections and restricted authorised access arrangements.

‍

For how long do we hold your personal data?

We will hold your personal data on our systems only for as long as is necessary to respond to and manage your enquiry.

Should you engage with our services, we will process your data in accordance with this Privacy Policy and will hold your personal data in accordance with the InHealth Data Retention Policy, which is in line with nationally recognised retention periods for health records, or as long as required by law. We will only hold your personal data for so long as is necessary for the objectives and purposes contained in this Privacy Policy. We will also retain your personal data where necessary for the establishment, exercise or defence of legal claims and to comply with our legal obligations.

Where you have provided consent for us to process your personal data, you have the right to withdraw your consent at any time by contacting us at info@preventicum.co.uk. Withdrawing your consent will cease any future use of your data, however, please note that your consent cannot be withdrawn from research projects already underway or completed.

‍

Who has access to your personal data?

We may disclose your personal data to our parent company InHealth Limited for billing and payment purposes only.

Where you have provided your consent for your personal data to be stored on our research database, we may disclose your personal data to our partners Radvance Limited and Infotech Consulting Martin Kopp who help us to manage our research database and maintain the accuracy, quality and security of the data.

‍Where you have provided your consent for your personal data to be stored on our research database for future research projects, we may also disclose your personal data to trusted third parties for carefully approved research projects to help advance medical knowledge and treatments. These third parties may include, for example, academic institutions, research organisations, pharmaceutical companies. We will always take appropriate steps to ensure that any third party receiving your personal data for research purposes maintains the highest standards of privacy, security and confidentiality. Before sharing any information, we conduct appropriate due diligence on each third party including:

Ensuring our relationship with each third party is subject to contract;
Imposing appropriate confidentiality obligations on each third party; and
Ensuring each third party has a legitimate and lawful purpose for accessing the information.

We will always take steps to try to ensure that information shared is either anonymised or pseudonymised, where anonymisation is not possible.

‍

Use of cookies

A cookie is a small text file which is placed onto your computer (or other electronic device) when you use our website. We use cookies on our website.

You can find the full details of the cookies we use in our cookie consent tool which can be found at the bottom of our website under the heading ‘We value your privacy’. You can also review and manage your cookie preferences at any time by clicking the cookie icon in the bottom left corner of our website.

‍

What rights do you have?

Under data protection legislation, you have rights including:

Right of access: you have the right to ask us for copies of your personal data. This is called a “Subject Access Request”.

Right to rectification: you have the right to ask us to rectify personal data you think is inaccurate or to complete information you think is incomplete.

Right to erasure: you have the right to ask us to erase your personal data in certain circumstances.

Right to restriction of processing: you have the right to ask us to restrict the processing of your personal data in certain circumstances.

Right to object to processing: you have the right to object to the processing of your personal data in certain circumstances.

Right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

Rights related to automated decision making: you have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal or significant effect on you unless the conditions and safeguards under data protection legislation are met. Where we decide to use automated decision making and this has a significant impact on you, we will inform you and you will have the right to request a human review and to challenge the decision.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

To ensure we are dealing with the right person, we may need to ask you to provide more information to verify your identity, for example by reference to your driving licence, passport, and utility bill or similar showing your name and address. To exercise any of these rights please contact us at info@preventicum.co.uk.

‍

Lodging a complaint

If you have reason to complain about how your personal data has been controlled and/or processed by us, please contact us by email at complaints@preventicum.co.uk.  

We shall try to resolve your queries promptly and, if you remain unsatisfied, you have the right to contact the Information Commissioner’s Office:

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk

‍

How to exercise your data protection rights and contact us

If you have any questions about this Privacy Policy or the personal data we hold about you or you wish to exercise any of your rights, please contact us at:

Name: Data Protection Officer

Address: Preventicum, Cursitor Street, off Chancery Lane, London WC2A 1EN

Phone: +44 (0) 20 7605 6900

Email:  info@preventicum.co.uk

‍

Do Not Track (DNT)

Please note that this website does not monitor or respond to Do Not Track browser requests.

‍

Changes to the Privacy Policy

We may change this Privacy Policy from time to time. You should check this notice occasionally to ensure you are aware of the most recent version that will apply each time you access this website.

‍

Last Revised | September 2026