Effective Date: 19.02.2026

1. Data Controller

The data controller is:

Docpal Limited

Registered Office: 71-75 Shelton Street, London, England, WC2H 9JQ

Email: hello@alteramedical.co.uk

ICO Registration Number: 00011332824

Altera Medical is responsible for ensuring your personal data is processed in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

2. Personal Data We Collect

We may collect and process:

• Identity Data (name, date of birth, identification details)
• Contact Data (address, email, telephone number)
• Medical Information (medical history, consultation notes, prescriptions, diagnostic information)
• Payment Data (processed via third-party providers)
• Technical Data (IP address, device information, browser type)

Medical information constitutes special category data under Article 9 UK GDPR.

 

3. Lawful Basis for Processing

We process personal data under:

• Article 6(1)(b) – Performance of a contract
• Article 6(1)(c) – Compliance with legal obligations
• Article 6(1)(f) – Legitimate interests (where applicable)
• Article 9(2)(h) – Provision of health or social care

 

4. How We Use Your Data

We use your data to:

• Provide medical assessment and treatment
• Maintain clinical records
• Issue prescriptions and referrals
• Process payments
• Respond to enquiries
• Comply with professional and regulatory obligations

We do not use your data for marketing purposes.

 

5. Data Sharing

We may share your information with:

• Clinicians involved in your care
• Laboratories
• Pharmacies
• Regulatory bodies
• Professional advisers
• IT and system providers
• Booking and payment platforms

All third parties are required to maintain appropriate confidentiality and security standards.

 

6. International Data Transfers

Some third-party providers (such as booking, payment, or analytics services) may process data outside the United Kingdom.

Where this occurs, we ensure appropriate safeguards are in place, including:

• Adequacy decisions
• Standard Contractual Clauses
• Equivalent lawful transfer mechanisms

 

7. Data Storage & Security

We use secure systems and reputable UK or EEA-based hosting and service providers.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

 

8. Data Retention

Medical records are retained in accordance with UK medico-legal guidance.

Typically:

• Adult records: minimum 8 years
• Children’s records: until age 25 or longer where required

Data will not be retained longer than necessary unless legally required.

 

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

All clinical decisions are made by qualified healthcare professionals.

 

10. Your Data Protection Rights

Under UK GDPR, you have the right to:

Access

Request a copy of your personal data.

Rectification

Request correction of inaccurate or incomplete data.

Erasure

Request deletion of personal data.

However, in healthcare settings, the right to erasure is limited where retention is required for:

• Legal obligations
• Clinical safety
• Professional regulatory compliance

Restriction of Processing

Request limitation of how your data is processed in certain circumstances.

Data Portability

Receive your data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.

Objection

Object to processing based on legitimate interests. This right may not apply where processing is required for healthcare provision or legal compliance.

 

11. Complaints

If you have concerns about how your data is handled, please contact:

hello@alteramedical.co.uk

If you remain dissatisfied, you may lodge a complaint with:

Information Commissioner’s Office (ICO)

www.ico.org.uk

 

12. Cookies

We use cookies and similar technologies on our website.

Details of how cookies are used and how you can manage your preferences are set out in our separate Cookies Policy.

Non-essential cookies are only activated with your consent.