How we handle your data under UK GDPR and the Data Protection Act 2018. Last reviewed: September 2026.
SOOS Health Ltd ('SOOS', 'we') is the controller of personal data processed through this website. Our ICO registration number is [to be completed by the data controller]. Our contact address is [registered office address].
Clinical services are delivered by our partner clinic, a separate legal entity regulated by the Care Quality Commission. When you continue to the partner portal, you become that clinic's patient and its privacy notice applies to your clinical data. We will publish or link the partner clinic's own privacy notice here.
This website collects no personal data of its own and sets no tracking or advertising cookies. The only data processed through this site is what you actively provide if you contact us.
When you proceed to the partner portal, that portal (a third-party service) may set cookies and collect the information you give it — for example identity, contact and health information needed for your assessment. You will be shown the partner clinic's privacy policy at that point.
Where we contact you or administer the service, we rely on legitimate interests (Art. 6(1)(f) UK GDPR) or your consent (Art. 6(1)(a)), which you may withdraw at any time.
Special category data, including health data, can only be processed with your explicit consent or where another Article 9 condition applies — for the clinical care itself, that is a matter for the partner clinic as your healthcare provider.
We do not sell your data. Where processors are used (for example hosting providers), they act under Article 28 data-processing agreements and, where relevant, the UK International Data Transfer Addendum applies.
Health records created through your consultations are held by the partner clinic under its retention policy, in line with NHS Records Management Code of Practice guidance.
Under UK GDPR you have the right to be informed, to access your data, to rectify inaccuracies, to erase data in certain circumstances, to restrict or object to processing, to data portability, and to withdraw consent. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
To exercise any right, contact [privacy contact email]. We respond within one month.
We review this notice at least annually. Material changes will be flagged on this page before they take effect.