Privacy Policy

 

 

At Alluvi Healthcarecentre, accessible via our main platform and the Alluvi shop, we prioritize the confidentiality and security of your personal and health data. This Privacy Policy outlines how we collect, use, process, and protect your information when you browse our website, complete consultations, or order specialized weight management and wellness treatments.

 

1. Information We Collect

To deliver safe medical consultations, process orders, and provide personalized treatment options (such as pre-filled injection pen treatments), we collect two main types of data:

Standard Personal Data

  • Contact & Identity Information: Full name, date of birth, phone number, email address, and delivery/billing address.

  • Order & Transaction Data: Purchase history through the Alluvi shop, payment confirmation details, and order tracking logs.

  • Technical Data: IP address, browser type, device information, and website interaction analytics gathered via essential and functional cookies.

Special Category Data (Health Information)

As a healthcare provider, we collect sensitive medical information under strict confidentiality protocols:

  • Medical history, symptoms, allergies, and current medications.

  • Height, weight, BMI measurements, and target weight goals.

  • Practitioner notes, consultation records, and prescription details.

  •  

2. How and Why We Use Your Data

We process your personal information under the following legal bases established by UK GDPR:

Purpose of Processing

Type of Data

Legal Basis (UK GDPR)

Medical consultations & prescripton evaluation

Personal & Health Data

Medical Diagnosis / Social Care (Art. 9)

Fulfilling orders from the Alluvi shop

Contact & Billing Data

Contractual Necessity (Art. 6)

Dispatching orders via cold-chain courier

Contact & Shipping Address

Contractual Necessity (Art. 6)

Sending service updates & delivery alerts

Contact Data

Legitimate Interest / Contract

Regulatory compliance & clinical record keeping

Health & Order History

Legal Obligation (GPhC / CQC)

 

3. Data Sharing & Third Parties

Alluvi Healthcare will never sell, rent, or trade your personal or health data to third parties for marketing purposes. We only share necessary data with trusted, verified partners under secure data processing agreements:

  • Prescribing Clinicians & Pharmacies: Registered medical professionals and dispensing partner pharmacies reviewing your consultation.

  • Couriers & Logistics Partners: Temperature-controlled delivery services responsible for shipping your order safely to your address.

  • Payment Processors: PCI-DSS compliant secure payment gateways to process transactions without storing full card details.

  • Regulatory Authorities: Legal bodies (such as the ICO, CQC, or GPhC) if required by law.

 

4. How We Safeguard Your Information

We employ industry-leading technical and organizational security measures to protect your sensitive health data:

  • Data Encryption: End-to-end TLS encryption for all data in transit across alluvihealthcarecentre.com, and AES-256 encryption for stored health records.

  • Access Control: Role-based access ensuring only licensed healthcare staff directly involved in your care can view clinical data.

  • Security Audits: Regular vulnerability checks and system maintenance to maintain strict data protection standards.

 

5. Your Rights Under UK GDPR

As a UK resident, you have statutory rights regarding your personal data:

  1. Right of Access: Request a copy of all personal and medical data we hold about you (Subject Access Request).

  2. Right to Rectification: Request corrections to incomplete or inaccurate personal data.

  3. Right to Erasure: Request the deletion of your personal data (subject to legal and clinical retention obligations).

  4. Right to Restrict or Object: Limit or object to how we process certain aspects of your data.

  5. Right to Withdraw Consent: Opt-out of non-essential processing or marketing communications at any time.

 

6. Data Retention

Clinical records and health assessment data are retained in accordance with mandatory UK healthcare guidelines (typically up to 8 years following the end of treatment). Standard account data is retained for as long as your account remains active on the Alluvi shop.

 

7. Contact Us & ICO Registration

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or need to contact our Data Protection Officer:

  • Email: privacy@alluvihealthcarecentre.com

  • Website: alluvihealthcarecentre.com

  • Regulatory Body: You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been handled improperly.

  •