Privacy Policy & Data Protection
The Integrated Immunology Clinic website and secure patient portal are owned and operated by Pharmakopoeia Laboratories Ltd, which acts as the data controller of your personal data. We take the confidentiality and security of your information extremely seriously. This policy explains how we handle data collected across both our public website and our secure patient portal.
1. Information We Collect
We collect two distinct categories of data depending on how you interact with Integrated Immunology Clinic.
Website visitors
When you visit our public website, we automatically collect standard device and browser information — including your IP address, browser type, time zone, and cookies — used solely to keep the site functioning securely and to compile aggregated, anonymised usage statistics.
Patient portal members
If you are invited to join our secure patient portal, you may provide sensitive clinical and health information, including medical history, consultation records, messages, uploaded documents, test reports, invoices, and Google Meet consultation notes or related appointment details. This data is stored securely in our clinical systems (including Firestore) under access controls — it is not anonymised away from your identity, because your practitioners need it linked to your care record.
If you request a consultation or contact us directly, we collect the personal data you provide — such as your name, email address, telephone number, and any health or referral information you share — solely to assess suitability, arrange care, and respond to your request.
2. How We Protect Your Clinical Information
Your privacy inside the patient portal is protected by design. Access to clinical records, test reports, messages, documents and Google Meet notes is restricted to authorised clinic practitioners and to you as the account holder. We use authenticated access controls, encrypted connections, and role-based permissions so that portal data is not exposed as part of the public website.
We do not sell your personal or health data. Clinical information is processed only for delivering care, supporting your programme, and meeting our professional and legal obligations. The clinic does not use artificial intelligence to analyse your patient data.
3. Why We Process Your Data
We process the minimum data necessary to operate the website and deliver your care. Specifically:
- Website device data — to identify potential abuse and maintain site security. This data is aggregated and cannot identify you personally.
- Consultation and contact data — to respond to your enquiry or maintain our clinical relationship with you.
- Portal clinical data — to enable your practitioners to deliver consultations (including Google Meet), programmes, messaging, document and test-report storage, and invoicing. Special category health data is processed only as needed for health care, with appropriate safeguards, or with your explicit consent where required.
4. Your Data Rights (UK GDPR)
Under UK GDPR, you have comprehensive rights over your personal data. These include:
- The right to be informed — to know what data we hold and how we use it.
- The right of access — to request a copy of your personal data at any time.
- The right to rectification — to have inaccurate data corrected.
- The right to erasure (the right to be forgotten) — to request permanent deletion of your records where applicable. Deletion requests are fulfilled within 30 days, subject to any legal or professional retention requirements for clinical records.
- The right to restrict processing and the right to object to processing.
- The right to data portability — to receive your data in a portable format.
- Rights in relation to automated decision-making — care decisions are made by your human practitioner; the clinic does not make fully automated decisions about your health.
International transfers
To deliver our services, your general website information and some service-provider processing (for example hosting, email delivery, video consultation via Google Meet, or payment processing) may take place outside the UK, including in Canada and the United States, in compliance with applicable data protection law and with appropriate safeguards.
5. Cookies
Our public website uses cookies to ensure the site functions correctly and to collect aggregated, anonymised visitor statistics. We do not use advertising cookies or sell your browsing data to third parties.
You can control or disable cookies through your browser settings at any time. Disabling cookies may affect some website functionality but will not affect your ability to read our content.
6. Information Security & External Links
We secure the information you provide on servers in a controlled, protected environment with reasonable administrative, technical, and physical safeguards in place. No data transmission over the internet can be guaranteed 100% secure, but we take all reasonable measures to protect your information in transit and at rest.
Our website may occasionally link to external third-party websites or diagnostic laboratories for your convenience. We are not responsible for the privacy practices of those third parties and encourage you to review their specific privacy statements. Google Meet consultations are subject to Google’s own terms and privacy practices in addition to this policy.
7. Legal Disclosure
We will disclose information we collect only if strictly required or permitted by law — for example, to comply with a subpoena or lawful government request — or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.
8. Contact & Data Rights Requests
To exercise any of your data rights, request deletion of your portal records, or ask any question about this policy, please contact our data protection team:
Email: help@integrated-immunology.com
Post: Data Protection, Pharmakopoeia Laboratories Ltd, Floor 3, 207 Regent Street, London W1B 3HH, England
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data rights have not been respected.
9. Related terms
Use of our website and services is also subject to our Terms and Conditions.