Privacy Policy

Zenvité is committed to protecting and respecting your privacy.

We understand that your personal data is entrusted to us and we value the importance of protecting and respecting your privacy. This privacy policy for private healthcare patients in North Wales explains how Zenvité collects, uses, and protects your personal information in line with UK GDPR, the Data Protection Act 2018, and relevant clinical and medical guidelines issued by professional bodies such as the General Medical Council (GMC), Royal Colleges, and the Nursing and Midwifery Council.

Scope of Our Privacy Policy

This Privacy Policy applies to anyone interacting with us in any way, including via our website, email, telephone, or post. It sets out how we collect, use, store, and disclose personal data about you, as well as your rights in relation to that data.

By using our website, providing your personal data to us, or accessing our services, you consent to the practices described in this Privacy Policy.

The data controller is Get Real Health Limited (Company No. 12744898), with a registered office at 3000 Aviator Way, Manchester, M22 5TG.

What Personal Data We Collect

We collect and process personal data that can identify you as an individual, including:

• Standard personal information: name, address, contact details (email, phone), date of birth.
• Next of kin details: you must ensure they are aware of and accept this Privacy Policy.
• Health and treatment information: medical history, clinical notes, reports, prescriptions.
• Payment information: billing details, financial or credit card information (processed securely by third parties; not stored by Zenvité).
• Technical information: IP address, browser type, time zone, operating system.
• Website usage data: pages visited, clickstream data, page response times, etc.

We may also collect information from:

• Family members or someone acting on your behalf.
• Healthcare professionals, NHS organisations, insurance companies.
• Public sources such as social media or electoral registers.

Lawful Basis for Processing

We process your data on the following bases:

• Contract: when providing services to you or preparing to enter into a contract.
• Legitimate interests: managing relationships, ensuring quality care, sending relevant updates (you can opt out at any time).
• Legal obligations: compliance with regulatory and statutory duties.
• Consent: for marketing communications or where required by law for sensitive data.

How We Use Your Data

Your personal data will be kept confidential and used only for the purposes for which it was collected, including:

• Providing and managing your care and treatment.
• Communicating with you about appointments, services, or enquiries.
• Processing payments and managing accounts.
• Quality monitoring and clinical audits (anonymised where possible).
• Complying with legal and regulatory requirements.
• Marketing communications (with your consent).

Sensitive health information will only be shared with third parties involved in your care if you have consented, or as required by law or professional guidelines.

Sharing Your Data

We may share your personal data with:

• Medical professionals involved in your care (employees or independent practitioners).
• Your GP (with your consent unless legally required).
• Your insurer (if they fund your treatment).

We do not transfer your data outside the UK or EEA. If necessary, we will implement appropriate safeguards such as ICO-approved Standard Contractual Clauses.

Data Retention

We retain your data only as long as necessary for the purposes collected and in line with legal and professional requirements:

Cookies and Website Data

Our website uses cookies to enhance user experience and analyse site performance. For details, see our Cookie Policy.

Data Security

We implement robust technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. In the unlikely event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority where required.

Your Rights

You have the following rights under UK GDPR:

• Access your data.
• Correct inaccuracies.
• Request erasure (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Not be subject to automated decisions.

To exercise your rights, email info@zenvitehealth.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Changes to This Policy

We review this Privacy Policy regularly and may update it from time to time. Please check periodically for updates.

Contact Us

For questions or concerns about this Privacy Policy, contact our Data Protection Officer:

Learn more about how we care for your data in our Terms & Conditions and Cookie Policy.