Legal
Vivenza Care Group Ltd is the data controller for the personal data collected through this website and in connection with our clinical services.
| Detail | Information |
|---|---|
| Legal name | Vivenza Care Group Ltd |
| Registered address | 26 Lennard Road, Croydon, CR0 2UL |
| Companies House No. | 17013826 |
| ICO Registration No. | 14466914 |
| Contact email | hello@vivenzagroup.co.uk |
| Website | vivenzahealthcare.co.uk |
When you use our website, make a booking, or receive clinical care, you may provide:
When you visit our website, we automatically collect:
| Purpose | Data used | Legal basis |
|---|---|---|
| Processing your booking and taking payment | Contact details, booking info, payment data | Contract performance |
| Sending booking confirmations and appointment reminders | Name, email, appointment details | Contract performance |
| Delivering clinical care during and after your appointment | Health questionnaire, clinical data | Contract performance; legal obligation; vital interests |
| Communicating your consultation summary to your NHS GP | Clinical data, contact details | Legitimate interests (continuity of care) — you may opt out |
| Maintaining clinical records as required by law | All clinical data | Legal obligation |
| Safeguarding — responding to concerns about your safety or others | Clinical data, contact details | Legal obligation; vital interests |
| Improving our website and services | Usage data, analytics | Consent (cookie consent) / Legitimate interests |
| Fraud prevention and security | Technical data, payment data | Legitimate interests |
| Complying with CQC and regulatory requirements | Clinical and operational records | Legal obligation |
Health information is "special category" data under UK GDPR and requires additional protection. We process your health data on the following bases:
We do not sell your personal data. We share it only where necessary:
| Recipient | Purpose | Location |
|---|---|---|
| Stripe Inc. | Payment processing | USA — Standard Contractual Clauses |
| Resend Inc. | Booking confirmation emails | USA — Standard Contractual Clauses |
| Semble | Clinical records management | UK |
| The Doctors Laboratory (TDL) | Blood test requisitions and results | UK |
| Google (Google Analytics) | Website analytics (anonymised usage data) | USA — Standard Contractual Clauses |
| Netlify Inc. | Website hosting | USA — Standard Contractual Clauses |
| Railway Corp. | Payment server hosting | USA — Standard Contractual Clauses |
| IONOS SE | Email hosting | Germany (EU) |
| Your NHS GP | Clinical correspondence (unless you opt out) | UK |
| CQC, ICO, and other regulators | Regulatory compliance — where legally required | UK |
All third-party processors are bound by data processing agreements. Where data is transferred outside the UK, we ensure appropriate safeguards are in place under UK GDPR Chapter V.
| Data type | Retention period | Reason |
|---|---|---|
| Clinical records | 8 years from last entry (or until age 25 if patient was a child) | NHS Records Management Code of Practice / legal obligation |
| Booking and payment records | 7 years | HMRC financial records requirement |
| Email correspondence | 3 years | Legitimate interests / complaints handling |
| Website analytics data | 26 months (Google Analytics default) | Service improvement |
| Cookie consent records | 12 months | Consent management |
Our website uses the following types of cookies:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
vcg_cc |
Stores your cookie consent preference | Essential | 12 months |
_ga, _ga_* |
Google Analytics — distinguishes users and sessions | Analytics (consent required) | 2 years |
Analytics cookies are only set if you click Accept cookies on our cookie banner. You can withdraw consent at any time by clearing your browser cookies or clicking "Decline" on the banner when it next appears (clear cookies to reset it).
We do not use advertising, tracking, or social media cookies.
Under UK GDPR you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete data.
Request deletion of your data where we no longer have a lawful basis to hold it. Note: clinical records must be retained for legal periods.
Ask us to restrict processing of your data in certain circumstances.
Receive your data in a structured, machine-readable format where processing is based on consent or contract.
Object to processing based on legitimate interests, including opting out of GP correspondence.
We do not make solely automated decisions that significantly affect you.
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of your rights, contact us at hello@vivenzagroup.co.uk. We will respond within one month. We may ask you to verify your identity before processing your request.
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include:
Vivenza Care Group Ltd provides services exclusively to adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from someone under 18, please contact us immediately at hello@vivenzagroup.co.uk.
We review this Privacy Policy at least annually and whenever there is a material change to our data processing activities. The "last updated" date at the top of this page will always reflect the most recent version. We will notify you of significant changes by email if you are a registered patient.
For any questions about this policy or to exercise your rights:
Email: hello@vivenzagroup.co.uk
Post: Data Protection, Vivenza Care Group Ltd, 26 Lennard Road, Croydon, CR0 2UL
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
We would always appreciate the opportunity to resolve your concern directly before you contact the ICO.