Privacy Policy

1. Who are we

RH Medical Group Ltd

Registered address: 5 South Charlotte Street, Edinburgh, EH2 4AN

Phone: 07341 673702

We are a Nurse Prescriber‑led medical service specialising in medication‑assisted weight management.

ICO Registration

We are registered with the Information Commissioner’s Office (ICO) as a data controller under registration number ZB939121.

2. Information we collect

We collect information to provide safe, effective care and to operate our services.

Personal Information

Name
Date of birth
Contact details
Address
Photo identification (passport, driving licence, or other government‑issued ID)
- We validate your identity before prescribing medication
- A secure copy of your ID is stored in your clinical record

Medical Information

Medical history
Current medications
Weight‑management history
Consultation notes

Payment Information - Invoice and transaction details

Payments are made by bank transfer — we do not store card details

Website & Technical Data

IP address
Browser/device information
Basic usage data

(Used for site functionality and simple analytics.)

3. How we use your information

We use your information to:

Provide safe, nurse‑led weight‑management services
Assess suitability for prescribed medication
Validate your identity before issuing prescriptions
Maintain accurate medical records
Communicate with you about appointments, treatment plans, and follow‑up care
Process invoices and manage payments
Send occasional newsletters or updates (only if you opt in)
Improve our website and service experience
Meet legal and regulatory healthcare obligations

We never sell your data or share it for unrelated marketing.

4. Legal basis for processing

We process your data under:

Consent – when you choose to provide information or agree to treatment
Contract – to deliver the services you request
Legal obligation – healthcare record‑keeping and regulatory requirements
Legitimate interests – improving our services and communication
Provision of healthcare – processing special category medical data as part of treatment
Compliance with identity‑verification requirements for safe prescribing

5. How we store and protect your data

Your information is stored securely within our Microsoft 365 environment, using encrypted systems and restricted access.

Our security measures include:

Encrypted storage
Access limited to authorised clinical staff
Secure communication channels
GDPR‑compliant cloud systems

Your photo ID is stored securely as part of your clinical record and is only accessed when necessary for regulatory or prescribing purposes.

6. Sharing your information

We only share your information when necessary for your care or when legally required.

This may include:

SomerX Pharmacy and Primed Pharmacy (and occasionally other licensed UK pharmacies) for prescription fulfilment
IT service providers supporting our website and email systems
Regulatory bodies if required by law
Your GP or other healthcare professionals

All partners are GDPR‑compliant and bound by confidentiality.

We do not share your data with advertisers or unrelated third parties.

7. Communication methods

To support your care, we may contact you via:

WhatsApp
SMS
Meta Messenger
Email
Phone

These channels are used for appointment reminders, follow‑up support, and essential service communication.

8. Marketing

We may send occasional newsletters or updates about our services.

You can unsubscribe at any time by emailing contact@rhmedical.co.uk.

9. Cookies

Our website uses simple cookies to support basic functionality and improve your browsing experience. You can manage or disable cookies through your browser settings.

10. Your rights

Under UK GDPR, you have the right to:

Access your personal data
Request corrections
Request deletion (where legally permitted)
Restrict or object to processing
Request data transfer
Withdraw consent at any time

To exercise your rights, contact us at contact@rhmedical.co.uk.

11. Data retention

Medical records, including identity documents, are kept in line with UK healthcare regulations, typically for at least 8 years.
Non‑clinical information is kept only as long as necessary.

12. Children's privacy

Our weight‑management services are for adults aged 18+. We do not knowingly collect information from children.

13. Updates to this policy

We may update this policy occasionally. The latest version will always be available on our website.

14. Contact Us

If you have any questions about how your data is handled, please contact:

RH Medical Group Ltd

Email: contact@rhmedical.co.uk

Phone: 07341 673702