Legal

Privacy policy

We explain how we handle your personal and health data, the lawful basis for processing it, and the rights you can exercise at any time.

Data controller

DoctorLife — hello@doctorlife.io. We process your data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Protection Officer

You can contact our Data Protection Officer (DPO) at dpo@doctorlife.io for any matter relating to the processing of your personal or health data.

What data we process

  • Identifying data: name, email, phone number.
  • Health data provided in the questionnaire.
  • Payment data (processed by our certified payment provider).

Purpose

  • Providing the medical consultation and issuing a prescription where appropriate.
  • Operational communications (email, the platform's private chat).
  • Meeting legal obligations.

Lawful basis

Explicit consent (Art. 6(1)(a) UK GDPR), performance of a contract (6(1)(b)) and compliance with a legal obligation (6(1)(c)). For health data, Art. 9(2)(h) UK GDPR — processing by healthcare professionals.

Retention

We keep your data for as long as you maintain your account, and for up to ten years after your last consultation to meet medical record-keeping obligations under GMC guidance.

Recipients

Your data is not shared with third parties for commercial purposes. Our processors (UK/EU hosting, email delivery, PCI DSS-certified payment provider) sign data processing agreements in line with Art. 28 UK GDPR.

International transfers

By default, your data is hosted on servers located in the UK or the European Union. Where we occasionally use a provider outside the UK, we apply the appropriate safeguards required under UK GDPR (International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).

Security measures

We apply the technical and organisational measures required under Art. 32 UK GDPR: encryption in transit and at rest, role-based access control, audit logging, encrypted backups, ongoing staff training and incident response procedures.

Your rights

  • Access, rectification, erasure, objection, restriction, portability.
  • Withdraw consent at any time.
  • Lodge a complaint with the Information Commissioner's Office (ico.org.uk).

Exercising your rights

Exercise your rights by writing to hello@doctorlife.io. We respond within a maximum of 30 days.