Privacy Policy

Effective Date: 01 July 2025

Flux Medical Limited (“we”, “us”, or “our”) is committed to protecting the privacy and confidentiality of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our services or interact with us.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Flux Medical Limited is a UK-registered healthcare company providing face-to-face and online consultations, clinical triage tools, and digital care navigation services. Our registered office is:
Unit 7 Wheatcroft Business Park Landmere Lane, Edwalton, Nottingham, England, NG12 4DG
Company Number: 16158150

Contact: info@fluxmedical.co.uk

What Information We Collect

We may collect the following types of personal data, depending on your interaction with us:

a) Patients and Service Users

  • Full name, date of birth, and contact details

  • Health information and medical history

  • Consultation records and clinical notes

  • Payment and billing details

  • Symptom checker responses or D2C navigation data

  • Feedback or complaints

b) Professional Partners

  • Contact and organisational details

  • Business communication records

  • Due diligence, contracting, and compliance documentation

c) Website Visitors

  • IP address and device data

  • Browser type and usage analytics (via cookies—see section 10)

How We Use Your Information

We use your personal data to:

  • Provide healthcare consultations and follow-up care

  • Respond to enquiries and deliver requested services

  • Communicate with you about your care or our services

  • Maintain accurate clinical records

  • Comply with regulatory, legal, or contractual obligations

  • Improve the safety and quality of our systems and tools

  • Manage partnerships, bids, and commercial discussions

We do not sell your personal data to any third parties.

Lawful Basis for Processing

We only process your personal data where we have a legal basis to do so, including:

  • Consent – e.g. when you submit an enquiry or sign up for updates

  • Contract – e.g. when you engage us for a clinical service

  • Legal obligation – e.g. safeguarding, regulatory compliance

  • Vital interests – e.g. in a medical emergency

  • Legitimate interests – e.g. business operations, audits, service development

For special category data (such as health information), we process it under Article 9 of the UK GDPR, where necessary for the provision of health or social care.

How We Store and Protect Your Data

We store your data on secure, encrypted systems located within the UK or EEA, or with trusted providers who meet equivalent data protection standards.

We apply strict access controls, audit trails, and data minimisation principles. All staff and contractors are bound by confidentiality obligations.

How Long We Keep Your Data

We retain personal data only for as long as necessary, in line with NHS records management guidelines and legal requirements. Retention periods vary depending on the type of record and your relationship with us.

Sharing Your Information

We only share your personal data when necessary, such as:

  • With healthcare professionals directly involved in your care

  • With your GP or referring clinician (with your consent)

  • With regulators, insurers, or legal representatives as required

  • With service providers who support our business (e.g. IT support) under strict confidentiality and data protection terms

Your Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of data (subject to clinical/legal obligations)

  • Object to or restrict processing

  • Withdraw consent at any time (where applicable)

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please email privacy@fluxmedical.co.uk

Children’s Privacy

We do not knowingly provide services directly to children without appropriate parental or guardian consent. If you believe we have collected personal data from a child without consent, please contact us.

Cookies and Website Analytics

Our website uses cookies to optimise your experience and monitor site usage. Cookies are small files stored on your device. You can manage or block cookies through your browser settings.

We may use anonymised analytics tools to understand how users interact with our site, but no personally identifiable information is stored or shared via cookies.

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law or our operations. The most recent version will always be available on our website.

Contact Us

If you have any questions or concerns about this policy or your personal data, please contact:

Data Protection Lead
Flux Medical Limited
Email: privacy@fluxmedical.co.uk