Home / Privacy
PrivacyYour health information
Last updated 14 October 2026. Draft — pending legal review before launch.
Health records are about the most personal information there is. This page explains what we hold, why, who can see it, and how to get it changed or deleted. We have tried to write it the way we would explain it out loud.
The short version
- Your records are yours. We share them only when you tell us to.
- We never sell your data, and we never use it for advertising.
- Your employer is never told anything clinical about you.
- You can see everything we hold, and ask us to correct or delete it.
- 1. Who we are
- 2. What we collect
- 3. Why we hold it
- 4. Who we share it with
- 5. Employers and the business plans
- 6. How long we keep it
- 7. How we protect it
- 8. Your rights
- 9. Cookies
- 10. Changes to this notice
1. Who we are
Very Transparent Healthcare provides the care platform described on this site. For the purposes of data protection law we are the data controller for the information described here, and our clinicians are responsible for the clinical records they create.
2. What we collect
Information you give us
- Account details: your name, date of birth, email address and mobile number.
- Health information: symptoms, history, medication, allergies, and anything you tell a clinician.
- Documents you upload, including photographs and reports from other providers.
- Payment details, which are processed by our payment provider — we do not store your card number.
Information created by your care
- Consultation notes, diagnoses, prescriptions and referrals written by your clinician.
- Test results ordered through us.
- Appointment history and messages exchanged with your care team.
Information collected automatically
- Basic technical data — device type, browser and IP address — needed to run the service securely.
- Which pages you visited, so we can see what is confusing and fix it.
3. Why we hold it
We hold your information for these reasons, and no others:
- To provide your care. A clinician cannot treat you safely without your history.
- To meet legal and professional duties. Medical records must be kept to a required standard, and prescribing is regulated.
- To take payment for the care you have agreed to.
- To keep the service safe and working — preventing fraud and abuse, and fixing faults.
Where the law requires your explicit consent for us to handle health information, we ask for it, and you can withdraw it at any time.
4. Who we share it with
We share your information only in these situations:
- Your care team — the clinicians treating you, so they can do so safely.
- Where you ask us to — for example sending a report to another doctor or to your insurer.
- Labs, pharmacies and clinics we use to deliver care you have booked, limited to what they need.
- Service providers who host and secure our systems, under contracts that forbid them using your data for anything else.
- Where the law requires it — for example a court order, or a serious risk to someone's life.
We do not sell your information. We do not share it with advertisers or data brokers, and we do not use your health information to target advertising.
5. Employers and the business plans
If your employer pays for your care, they are our customer for billing — not for your records. They are told how many people used the service and what they were billed. They are never told who booked, what was discussed, what was diagnosed or what was prescribed. Where a group is small enough that a figure could identify someone, we do not report that figure at all.
6. How long we keep it
Medical records are kept for the period required by law and professional guidance, which is generally several years after your last contact, and longer for children's records. Account and billing records are kept as long as needed for tax and accounting. When a retention period ends, we delete the information or irreversibly anonymise it.
7. How we protect it
- Encrypted in transit and at rest.
- Access limited to the clinicians and staff who need it, and logged when used.
- Staff trained in confidentiality, with access removed when they leave.
- Regular security testing, and a plan for telling you promptly if something goes wrong.
8. Your rights
You can ask us to:
- Show you everything we hold about you.
- Correct anything that is wrong.
- Delete your information, where no legal duty requires us to keep it.
- Send your records to you or to another provider in a portable format.
- Stop a particular use of your information, or withdraw a consent you gave.
Email privacy@verytransparenthealthcare.com and we will respond within 30 days. There is no charge. If you are unhappy with how we have handled your information, you can complain to the relevant data protection authority.
9. Cookies
We use the cookies needed to sign you in and keep your session secure, and a small amount of analytics to understand which pages are unclear. We do not use advertising or cross-site tracking cookies. You can clear or block cookies in your browser, though signing in will stop working.
10. Changes to this notice
If we change anything significant, we will email you before it takes effect rather than quietly updating this page. The date at the top always shows the current version.
Questions about your data
Email privacy@verytransparenthealthcare.com. A person reads it — you will not get a form letter.