Last updated: 14 October 2026. Version 2.47.1.

We use your information to arrange your assessment, support your care and operate Averon Health. This policy explains the information we use, the people and suppliers involved, and your choices. It also explains the conditions under which we may use information to check and improve our services and publish anonymous statistics.

1 Who is responsible for your information

Averon Health is a trading name of You4You Health Ltd, company number 16520637, registered in England and Wales. Our registered office is 85 Great Portland Street, First Floor, London, W1W 7LT, United Kingdom. We are the controller of personal information for the services and purposes described in this policy. This means we decide why and how that information is used.

Our Data Protection Officer is Anastasiya Karelina. Contact her at support@averonhealth.com, or write to our registered office marked Data Protection Officer. Please do not include detailed medical information or identity documents in an initial email. We can arrange a suitable way to exchange sensitive information.

Clinics, laboratories, clinicians and payment providers may also be responsible for information they use for their own professional, regulatory or legal purposes. Their privacy notices apply to that separate processing. We remain responsible for our own use of your information and for suppliers processing it on our instructions.

2 What this policy covers

This policy covers our public website, patient platform, enquiries, assessments, bookings, payments, questionnaires, reports, consultations and support. It also covers the Preventive Health plan, progress records and check-ins where this service has been enabled for your account.

For clinicians and administrators, it covers platform account details, professional role information and records of their activity in the service. Employment and recruitment matters require separate information provided through those processes.

Our patient service is for adults aged 18 or over who meet the eligibility conditions explained when registering. If information about a child is supplied inadvertently, we assess how to protect the child and retain only what is justified for safety or another legal requirement.

3 Information we collect and where it comes from

We collect information that you enter, send to us or ask another person to provide. We also receive information from the clinics and laboratories involved in your assessment, your reviewing clinician, payment providers and, where lawfully shared for your care, your GP or another healthcare professional.

• Account and contact information, such as your name, email, telephone number, date of birth, sex at birth, login details, eligibility confirmations and communication preferences.
• Care information, including your medical and family history, medicines, symptoms, lifestyle, goals, questionnaire answers, blood results, body measurements, clinical observations, professional recommendations, consultation records and reports. This can include other sensitive information where relevant to your care, such as ethnicity or reproductive health information.
• Your current residential address, residence period and one immediately previous address where required, including an overseas or no-fixed-previous-address category. GP details or your recorded choice not to provide them remain separate. We also retain relevant historical choices and age-check evidence as described in section 7.
• Booking and transaction information, including clinic and appointment details, order status, vouchers, and payment and refund status. Stripe collects payment-card details through its payment service; our application does not receive the full card number or security code through that checkout.
• Preventive Health information, including your plan, goals, progress entries, check-ins and messages you choose to enter. Please limit messages to information relevant to your own care and plan.
• Enquiries, feedback, complaints and communications with us, including information you put in a contact form or email.
• Technical and security information needed to operate the service, such as connection and device information, session state, request timing, errors and records of access or changes. These records can be personal information even when they use an account reference instead of a name.
• Report presentation information, where this feature is offered, including draft and approved summary text, captions, generated narration and the associated clinical review and release records. We also record the limited report and video activity described in section 5, linked to the relevant published version.

Questionnaire answers and valid care-detail selections may be saved as you work, before you press the final submit button. A saved draft is not the same as a submitted questionnaire or a clinician-approved report.

We may verify information where necessary to protect access or provide safe care. If a process needs additional identity evidence, we explain what is needed and how it will be handled at that point. This policy does not authorise an undisclosed biometric identity-checking programme.

4 Why we use information and our legal grounds

UK data protection law requires a lawful basis for personal information and an additional condition for health information and other special-category data. The grounds below apply to the stated purpose; accepting our Terms does not give us unlimited permission to use health information.

For account creation, arranging and delivering purchased services, bookings, payments and support, we rely on taking steps at your request before a contract or performing our contract with you, under Article 6(1)(b) of the UK GDPR. For necessary preventive care, clinical assessment, professional review and management of our healthcare services, we also rely on Article 9(2)(h) and the corresponding health and social care condition in the Data Protection Act 2018. Health information is handled by, or under the responsibility of, appropriately qualified professionals and people subject to the required confidentiality duties.

For necessary service administration, security, fraud prevention, reliability checks and proportionate operational analysis, we rely on legitimate interests under Article 6(1)(f), after considering necessity and the effect on your rights. Our interests are running a safe, reliable service and understanding where it needs to improve. Where the activity needs health information, a separate special-category condition must also apply; legitimate interests alone are not enough.

For clinical quality checks, incident investigation and improvement that are necessary to manage the healthcare service, we use Article 6(1)(f) with the healthcare condition described above where its requirements are met. We limit access to what the activity needs. Activities outside that scope must follow section 6 and cannot automatically use the healthcare condition.

Preparing and delivering a clinician-reviewed presentation of your report forms part of the care and service-delivery purposes above. We use limited report and video activity records to support care follow-up and check delivery of the service. For these limited records we rely on our legitimate interests in supporting clinical follow-up and checking delivery under Article 6(1)(f), with Article 9(2)(h) where health information is involved and the healthcare and confidentiality conditions described above are met. These records are not used for advertising, unrelated profiling or optional product research. Any further use must satisfy the relevant grounds and safeguards in this policy.

For a specific legal obligation, such as applicable accounting, regulatory reporting or record-keeping duties, we rely on Article 6(1)(c). If health information is involved, we must also identify the applicable special-category condition. For establishing, exercising or defending legal claims, we generally rely on Article 6(1)(f) and, where necessary, Article 9(2)(f).

For optional email marketing, we rely on your consent under Article 6(1)(a) and the applicable electronic-marketing rules. We do not treat agreeing to receive a guide or an essential service message as permission for unrelated marketing.

Where we ask for separate explicit consent to an optional use of health information, we rely on Articles 6(1)(a) and 9(2)(a). We explain the activity and withdrawal arrangements before you decide. Refusing an optional use does not affect the care you have purchased.

In a genuine emergency we may use or disclose information where necessary and legally justified to protect a person. The vital-interests conditions in Articles 6(1)(d) and 9(2)(c) are only used where their requirements are met, including the requirement relating to inability to consent for special-category data. Other lawful clinical or safeguarding grounds may apply to particular circumstances.

5 Reports, video consultations and Preventive Health

Our report service uses AI to organise assessment information, prepare draft explanations and check drafts against clinical evidence and safety rules. It uses Anthropic Claude models through Amazon Bedrock. Requests are sent from the AWS London region and may be processed in AWS data centres in the UK or the European Economic Area (EEA); Anthropic does not receive them. Relevant questionnaire responses, results, clinical context and draft material are processed by this service. Removing a name does not make a detailed health history anonymous, so we continue to protect these inputs as health information.

A clinician must review and sign the clinical report. An administrative release check follows before the approved report is published to you. Administrative checks do not replace clinical judgment. AI can make mistakes; it is not the clinician and does not independently authorise treatment or release the final clinical report.

Where offered, your signed report may also have a short narrated presentation, with captions and selected information shown on screen. AI helps prepare the wording from the signed report and the clinician's explanations and recommendations. The presentation is intended to explain that report, not to add a new diagnosis or replace the full report. A clinician reviews the wording and the selected content, approves the narration text, and previews the presentation before sending it for administrative release. The report and presentation have separate release steps.

The presentation service uses the relevant report information and may use your first name for its greeting. Amazon Bedrock processes the material when preparing and checking the draft. Amazon Polly converts the approved narration text into speech. These services are configured in AWS London. We store the generated narration and review records in our protected systems, and access is subject to account permissions and release checks. Section 9 explains the limits of our statements about processing location.

Optional background music is a pre-generated instrumental file served with the application. It contains no patient information. Patient reports and narration text are not sent to the music-generation service as part of presentation playback or generation.

For each published report version, we record the first time its content is opened in a visible patient page. For each approved video version, we record the first playback start and the first recorded natural playback completion. Each record identifies the relevant version, event and time. Authorised clinical and administrative staff can use these records for the follow-up and service-delivery purposes in section 4. They do not establish that you read, heard or understood the content, followed a recommendation or agreed to treatment. They are not a continuous record of everything you browse, and we do not use them as advertising analytics.

For a video consultation inside your Averon account, Amazon Chime SDK carries the live sound and video between you and your clinician. This may include health information you discuss. The meeting and media service is configured in AWS London. Connections are encrypted in transit, but AWS processes the media to deliver the call; this is not end-to-end encryption between you and your clinician. Section 9 explains the limits of our statements about processing location.

Your browser asks for camera and microphone access. We use account and appointment checks, a waiting room and clinician admission to control access to the call. AWS processes the connection and technical information needed to provide the meeting service. Averon does not record these calls. You can discuss a telephone alternative with your clinician.

If you agree, your clinician may use live transcription during a video consultation to help write your notes. The conversation is turned into text on your clinician's screen, and AI can prepare draft notes from that text. Your clinician checks and edits any draft and remains responsible for the consultation record. Your call page shows when transcription is in use. We do not keep an audio recording or the transcript; we keep the notes your clinician writes. Transcription uses Amazon Transcribe through Amazon Chime SDK in AWS London, and drafting uses Amazon Bedrock as described above, in the UK or the EEA. We do not authorise suppliers to use this content to train or improve their models. You can decline, or ask your clinician to stop transcription at any time, without affecting your consultation.

We keep the written consultation record and relevant appointment and service events, such as opening, admission, transcription agreement and ending times, for care, service delivery and accountability under the purposes and legal grounds in section 4. These events are not a recording of the conversation or proof of everything said. Access is limited to authorised roles. The retention criteria in section 10 apply to consultation records and associated operational information; meeting-access information is protected as service data, not used for advertising analytics.

Preventive Health uses your plan, goals, progress entries and check-ins to help you follow your recommendations and keep a record of your progress. Information you enter may be health information and receives the protections described in this policy. These tools do not replace a clinical consultation or provide an emergency contact service.

We retain appropriate report versions, evidence and review records in our own systems for care, safety and accountability. Some AI requests use temporary prompt caching to avoid repeatedly processing the same context. We therefore do not promise that an AI input is never stored anywhere. Supplier processing and retention must follow the terms and settings approved for the particular service.

We do not train our own foundation model on patient information. Improving prompts and safety rules is a separate activity, described below. We do not authorise suppliers to use patient content to train their general-purpose models as part of the report-generation service. A change to that approach would require a separate legal assessment and information to affected people before any new processing.

6 Improving our services and producing anonymous findings

We may analyse service performance, report quality, clinical outcomes and the usefulness of our tools to identify problems and improve care. This can include testing whether instructions given to an AI system produce accurate, relevant and understandable answers, whether safety checks detect unsafe or unsupported statements, and whether a proposed change introduces errors or unequal performance. It can also include evaluating clearer report wording and better ways to present information.

For product development and reusable test examples, our preferred starting point is synthetic information or information that has been effectively anonymised. Replacing a name with a code is only pseudonymisation: the information remains protected personal data if someone could reasonably identify the person.

If identifiable or pseudonymised health information is necessary for a quality activity within the healthcare-service purpose in section 4, we assess and document that necessity, the applicable legal grounds, confidentiality arrangements, access and retention. We do not use the phrase service improvement to extend this permission to every commercial activity.

To run and improve our service, we keep pseudonymised records of the main steps people take with it: registering, paying, booking and attending a blood test, submitting the questionnaire, receiving results, the release of a report and consultations, together with any refund or payment dispute. Where you accepted website analytics, these records also note how you first reached us, as described in section 11. Each record replaces your account reference with a code and holds no name, contact details, results or clinical content. We keep these records in our own systems in the UK for up to 13 months and use them only to produce combined statistics in which small groups are hidden; they are never shared with advertising services. We rely on our legitimate interests in running a safe, reliable and improving service. Because the records show that someone used a health service, we also rely on the condition for managing health care services, with the confidentiality and access safeguards described in this policy. You can object to this use, and section 12 explains how to ask for your records to be removed.

An optional activity outside those grounds, including a reusable patient-level prompt evaluation dataset, needs another valid legal route before it starts. Where that route is explicit consent, we ask separately and explain the information used, the work involved, who will receive it, how long it will be kept and how to withdraw. Agreeing to the Terms or submitting a questionnaire is not consent to that optional reuse.

Where a specific project qualifies as scientific research or statistical processing, we may use the relevant legal provisions only after confirming their requirements. This includes an Article 6 basis and, for health information, an Article 9 condition, the applicable UK safeguards and any confidentiality or ethical approvals. We will provide project-specific information before participation or reuse where required. A commercial purpose does not by itself disqualify scientific research, but ordinary product development does not become scientific research merely because we call it that.

We may produce genuinely anonymous, combined statistics about our services and outcomes. We may use those findings in internal planning, product development, quality reporting, research publications, conferences, education, business presentations, marketing and commercial collaborations, including products based on anonymous combined insights. The work needed to create anonymous information must itself have a lawful basis and satisfy confidentiality requirements.

Before external publication or sharing, we assess whether people could reasonably be identified from the proposed output together with other available information. We suppress or combine small groups and distinctive details where needed and consider the effect of releasing several related statistics. Public outputs will not include identifiable patient stories, raw records, photographs, quotations or patient-level datasets under this permission.

Once information is genuinely anonymous, it is no longer personal information. We may retain and use it without linking it back to you. It may not be possible to remove your contribution from anonymous statistics already produced or published. We will not attempt to identify you from those outputs.

7 Address history, age checks and GP choices

Your home address can be needed to issue a prescription and to support safe follow-up, including arranging appropriate help if an important result needs urgent attention. Your GP details can help your clinician coordinate care and share relevant information where appropriate and lawful.

We require your current UK residential address and how long you have lived there. If you have lived there for less than two years, we ask for one immediately previous address. That address may be overseas; if you had no fixed previous address, select that option without providing a personal explanation. New patients provide these details in the care-details form after payment. Existing patients complete missing details before their next new booking. Missing history does not remove access to existing appointments, rescheduling or reports. You may still choose not to provide GP details; we explain any resulting limitation on care coordination.

Our service is for adults aged 18 or over. Authorised administrators can record an age check they have completed, including a check of identity evidence, without uploading a copy of your document. Where electronic age checking is enabled, we securely send only the required name and address fields to AgeVerifyUK, operated by Simunix Limited. We try the current address first and may try the saved previous UK address once if there is no match. An overseas address or a no-fixed-address exception is not sent for a UK address check. We do not send clinical information, questionnaire answers or reports for this purpose.

We use age checks for our legitimate interest in limiting this service to adults, subject to our necessity and balancing assessment. A match is evidence to support staff review, not a guarantee of identity. A weak match, possible underage result or conflicting evidence is reviewed by staff; it does not automatically cancel care or restrict reports. We keep the check method, outcome, dates, limited reference if needed, responsible staff record and corrections. Raw provider reports and identity-document copies are not required for this workflow. Previous addresses are excluded from laboratory booking payloads, clinical AI inputs and unrelated exports.

You can ask us to correct your address or age-check information and request human review of an inaccurate result, using the contact details in this policy. Changes to relevant personal details can require a fresh check. Corrections and withdrawals retain an audit trail so staff can understand what changed. We apply purpose-specific retention to address history and age-check evidence, consider applicable legal holds, and include this information in relevant access and deletion requests. Electronic checks will only be activated after the supplier arrangements and our privacy assessment are approved; a staff member recording a manual check does not itself authorise disclosure to an external provider.

Providing GP details is not blanket permission to send your entire record for unrelated purposes. We discuss routine sharing where appropriate and respect confidentiality requirements. Serious safety concerns or a legal obligation may justify necessary sharing without consent; we disclose only what is relevant and explain it where it is safe and lawful to do so.

8 Who receives information

Access within Averon is limited by role and purpose. Clinicians need clinical information to review and advise. Authorised operations and administrative staff may need it for allocation, safety follow-up, handling reports and release checks. Technical staff should use non-identifying diagnostics where possible and may access personal information only through an authorised, necessary process subject to confidentiality.

Our principal service categories include:

• AWS hosting, account authentication, database and document storage, workflow processing, security and service email, including Amazon Bedrock for the AI functions, Amazon Polly for report narration and Amazon Chime SDK and Amazon Transcribe for live video consultations and their optional transcription described above.
• Randox and the participating clinic or laboratory for booking, sample collection, relevant observations, testing and return of results. They receive the identity, contact, booking and relevant care information needed for their part of the service.
• Stripe and the payment networks for payment collection, refunds and payment security. Stripe can act on our instructions for some activities and as a controller for its own legal, security and payment purposes. Its notice is at https://stripe.com/gb/privacy.
• Ideal Postcodes for postcode-based address lookup. The lookup request uses the postcode you enter. Mapbox provides the clinic map and receives connection and map-request information. If you choose a location feature and allow browser access, it can use your device location. Mapbox explains its processing at https://www.mapbox.com/legal/privacy. You can use available manual clinic selection without granting precise device location.
• Our business email and support providers when you contact us or receive messages. These providers may hold correspondence as well as delivery information.
• Other healthcare professionals involved in your care, and professional advisers, insurers, regulators or authorities where necessary, proportionate and legally justified.

Suppliers acting as processors must follow our lawful instructions and appropriate data-protection contracts. Independent controllers are responsible for their own purposes and legal duties. We do not sell personal information or provide identifiable health information to advertisers.

If our business is reorganised or transferred, any necessary disclosure is subject to confidentiality, data minimisation and applicable law. We use anonymous information for preliminary discussions where practicable and do not treat a transaction as permission for unrelated use of patient records.

9 Location and security

Our core application storage is configured to use AWS in London, and our AI report and note drafting runs in AWS data centres in the UK or the EEA, which UK law recognises as providing adequate protection. This is not a promise that every supplier, support activity or internet delivery service operates only in the UK. Some suppliers, including payment and mapping services, process information internationally.

Where a restricted transfer occurs, we must use an applicable UK adequacy arrangement or appropriate safeguards, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with the required assessment and additional measures. Contact us for information about the safeguards relevant to your information, or a copy with confidential commercial details removed where necessary.

We use measures appropriate to the risks, including encryption, access controls, separated user roles, activity records and recovery arrangements. No online service can guarantee absolute security. Please protect your account and tell us promptly if you suspect unauthorised access.

10 How long information is kept

We keep personal information only for as long as its purpose, applicable duties and justified retention needs require. Closing an account does not automatically require deletion of its clinical record.

Clinical records, signed reports and relevant review evidence are retained for continuity of care, professional record-keeping, patient safety and the handling of complaints or claims. For ordinary adult health-assessment records, our standard retention review point is eight years after the last clinical contact in the relevant course of care. Records remain available while needed for ongoing care. Different record types may require longer periods, and a complaint, claim or legal hold may also extend retention. We review the applicable clinical, professional and legal requirements before securely deleting or anonymising records; reaching the review point does not cause automatic deletion.

We retain approved presentation text, published narration and the associated review and release evidence alongside the clinical record to which they relate. We assess the retention of report and video activity records against their care follow-up and service-delivery purpose. Unreleased drafts, failed narration attempts and superseded audio are considered separately: the fact that a file was generated does not by itself justify keeping it indefinitely. Some material may still be needed to explain a clinical decision, investigate an incident or meet a legal hold. These categories must be covered by the applicable retention schedule, including protected historical copies and backups.

Financial records are retained for applicable accounting and tax requirements. Enquiries and support records are retained according to their purpose and whether they form part of a clinical record or unresolved complaint. Security logs and temporary operational records use shorter, purpose-specific periods where possible. Separately approved evaluation datasets must have their own retention period and review date, not an indefinite default.

Backups and historical versions may remain for a controlled recovery period after removal from active systems. They are protected, are not a continuing source for ordinary analytics, and must be subject to the applicable deletion or restriction if restored. We delete or anonymise information when retention is no longer justified. You can ask us which retention criteria apply to your records.

11 Cookies and similar technology

Strictly necessary storage supports account authentication, session coordination, navigation, security and features you request, such as preserving booking progress. A first-party session hint, averon_app_session, lets the public website show signed-in navigation; it does not contain your clinical record. Browser storage inside the patient platform also holds session and interface state. Stripe uses storage during checkout for payment security and fraud prevention.

On the public website we save your cookie choice in averon_consent and a browser-storage copy for up to 12 months. Accepting and rejecting optional analytics are remembered for the same period. Your browser may clear this storage sooner. Necessary storage does not require an optional analytics choice, and rejecting analytics does not prevent access to purchased care.

With your consent, Google Analytics helps us understand use of our public website and improve it. The legal basis is your consent under Article 6(1)(a), together with consent for optional storage under the applicable electronic-communications rules. Google Analytics loads only after you accept. It is not installed in the patient or clinician platform, and report/video delivery records described in section 5 remain within our clinical service rather than being sent to Google.

Analytics uses pseudonymous browser identifiers and information such as public pages viewed, the type of page, broad device and country information, and a small set of named interactions: which buttons into the patient platform you use and where they sit on the page, whether a website form was accepted (never what you typed), whether you opened a frequently asked question, whether you saw our prices and how far down a page you read. If the link that brought you here carried campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term or utm_id), those tags are included after we remove any that look like contact details or long numbers; every other part of a link's address is removed first. If another website sent you, only that website's address is included, never the page you were on. Analytics does not make visitors anonymous. We do not intentionally send names, email addresses, questionnaire answers, report contents or other clinical information to Google. We limit the information sent and use Google's available redaction and privacy controls; please do not put personal or health details in public website links.

The _ga and _ga_ analytics cookies last up to approximately 13 months. Our Google Analytics retention setting for detailed user-level and event-level data is 14 months, with resetting on return visits disabled. This setting does not delete standard aggregated reports, which Google treats separately. Browser-cookie duration and Analytics data retention are different periods.

When you accept analytics, we also keep a first-party note, averon_ft, of how you first reached us: the kind of channel (such as search, social, email, paid or direct), the referring website's name or the campaign tags, the type of page you arrived on and the date. It holds no name, contact detail or identifier, lasts 30 days and is removed when you turn analytics off. If you register for the patient platform while analytics is accepted, the platform passes this note with your registration so we can count which channels lead people to our service. This relies on the same consent. Inside our own systems the note becomes part of a pseudonymised registration event kept for up to 13 months to produce those counts. It is not added to your patient profile, is never sent to Google or any advertising service, and is reported only in combined form.

Our hosting provider keeps short-lived request logs, as for any website. Once a day we count page requests from those logs by type of page, so we know total visits including from people who decline analytics; we keep only the daily totals, not addresses or browser details. We rely on our legitimate interests in understanding overall use of the website for these totals. Members of our team can mark their own browsers so that their visits are left out of reports.

Google signals, advertising personalisation and granular location/device collection are disabled. Google processes Analytics information under its applicable terms and data-processing terms. Processing may take place outside the UK, including in the United States, under the safeguards described in section 9. Google's privacy information is available at https://policies.google.com/privacy.

You can accept or reject analytics in the cookie notice and change your choice through Cookie settings at the bottom of every public website page. Withdrawal stops further analytics measurement and removes analytics cookies accessible to this website; it does not retrospectively erase information already lawfully collected. You can contact us about applicable deletion rights. A Global Privacy Control signal is treated as a refusal unless you have explicitly chosen otherwise in our controls.

Payment and mapping services used in the patient journey may process connection or device information and use necessary storage for the requested service. Permission to access precise device location is a separate browser choice and is not permission for unrelated tracking. We explain any additional optional technology and provide the required choices before activating it.

12 Your rights and choices

Depending on the processing and legal grounds, you may ask to access your personal information, correct it, erase it, restrict its use, receive certain information in a portable format, or object to processing based on legitimate interests. Some rights have exceptions; if we cannot fulfil a request, we explain why and how you can challenge the decision.

You can withdraw consent to an optional activity as easily as you gave it, including by contacting support@averonhealth.com. Withdrawal does not make earlier lawful processing unlawful. It stops future processing that depends on that consent, but does not require removal of a clinical record we must lawfully retain or information that is already genuinely anonymous. We do not switch legal grounds simply to avoid a valid withdrawal.

You can unsubscribe from marketing at any time using the message link or by contacting us. We may retain a minimal suppression record to honour your choice. Essential account, booking, payment and safety messages are separate from marketing.

Final clinical reports require professional review. If an automated account, payment or eligibility check affects your access, contact us to ask for an explanation and human consideration of the issue. We must provide any additional safeguards required by law for a significant solely automated decision.

We normally respond to rights requests within one month. Where the law allows additional time, or we need proportionate identity verification or clarification, we explain the position and relevant deadline. Please avoid sending identity documents until we have explained a suitable verification process.

13 Complaints and changes

You can make a data-protection complaint to support@averonhealth.com or by post to our registered office. We will acknowledge it within 30 days, investigate appropriately, keep you informed and explain the outcome without undue delay. You do not need to use legal language or label the message in a particular way for us to recognise a privacy complaint.

You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113, and you retain any right to seek a judicial remedy. You do not have to waive those rights to use our complaints process.

We review this policy as services and requirements change. We will give appropriate notice of material changes and information about a new purpose before starting it where required. A new policy does not retrospectively authorise a previously unlawful use or replace consent where consent is required.