Privacy Policy

# InforMed Website Privacy Policy

INFORMED HCP Ltd - informedhub.uk

Version 3.0 - Last updated September 2026

This privacy policy tells you what to expect us to do with your personal information when you visit the InforMed website, register your interest in the beta, or contact us.

1. Who we are

InforMed is a secure, identity-verified peer advice platform for UK registered healthcare professionals. Every member's registration is checked against their regulator's public register before they can post.

The data controller is:

• INFORMED HCP Ltd, registered in England and Wales, company number 17093820
• ICO registration number: ZC122097
• Email: admin@informedhub.uk

If you have any question about this policy or want to exercise your data protection rights, email us at the address above.

2. What this policy covers

This policy covers the InforMed website at informedhub.uk only. That means:

• the "register my interest" form
• the feedback and feature request form
• correspondence with us by email, including support queries and complaints
• verification we carry out ahead of time for people who register their interest
• cookies and browser storage on the website

It does not cover the InforMed mobile app. Registration, verification inside the app, your account, and anything you post on the platform are covered by a separate privacy policy for the app, which is available in the app and through the app stores.

What the website stores in your browser is set out separately in our Cookie Policy at informedhub.uk/cookies.

3. What information we collect, use, and why

When you register your interest in the beta

The form on our join page asks for:

• Full name
• Regulator (GMC, NMC or GPhC)
• Registration number
• Professional role or job title
• Work email address

We use these details only to confirm your professional registration and to send you your access link, so that you can start using the platform as soon as you install the app. When you go on to create an account in the app, your information is then handled under the app's privacy policy.

When you contact us or send feedback

• Your name and contact details
• The content of your message, including feedback, feature requests, support queries or complaints
• Any correspondence that follows

We use this to respond to you, to resolve the issue, and to improve the service.

When you browse the website

• Standard technical information such as IP address, browser type and pages visited, handled by our hosting provider to keep the site secure and available
• If you accept analytics cookies, aggregate information about how the site is used

Payments

The website does not take payments and we do not collect payment card or bank details through it. InforMed is free during beta.

4. Verification checks

If you register your interest, we verify your eligibility before issuing an access link.

We check your registration against the publicly available registers maintained by the General Medical Council (GMC), the Nursing and Midwifery Council (NMC) and the General Pharmaceutical Council (GPhC), using each regulator's official register lookup or API where available. The information we obtain may include your registration number, registration status, professional title, specialty, and any publicly recorded restrictions or conditions on your practice.

Our lawful basis for this verification is legitimate interests: restricting access to the platform exclusively to verified healthcare professionals seeking regulated peer clinical advice, and giving users the corresponding assurance that their peers are appropriately registered.

Ongoing re-verification, once you are a member, is covered by the app's privacy policy.

5. Where we get personal information from

We collect personal information from two sources: directly from you when you complete a form on the website or contact us, and from the healthcare professional regulatory bodies named above when we verify your registration.

6. Lawful bases

Under UK data protection law we must have a "lawful basis" for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR, and you can find out more about them on the ICO's website.

• Registering your interest and verifying your registration - legitimate interests: ensuring only UK registered healthcare professionals are given access, and making verification quick when you install the app.
• Responding to your enquiries, feedback and complaints - legitimate interests: running a usable service and dealing properly with the people who contact us.
• Keeping the website secure and available - legitimate interests: protecting the site and its visitors from abuse.
• Optional analytics cookies - consent.
• Marketing and product update emails - consent.

Where we rely on legitimate interests we have considered whether our interests are overridden by your rights, and we have concluded they are not. You can ask us for more detail about that assessment.

Where we rely on consent, you can withdraw it at any time. Withdrawing consent does not affect anything we did with your information before you withdrew it.

7. Who we share information with

• Suppliers and service providers who help us run the website, including our hosting, email and analytics providers. They act on our instructions and may only use your information to provide the service to us.
• Organisations we are legally obliged to share information with, for example in response to a lawful request from a court or law enforcement.

We never sell your personal information, and we do not share it with advertisers.

8. Where your information is stored

Your information is stored on servers in the United Kingdom or the European Economic Area, and is encrypted in transit and at rest.

If we ever need to transfer personal information outside the UK or EEA, we will only do so where appropriate safeguards recognised under UK data protection law are in place, and we will update this policy first.

9. How long we keep information

• Registrations of interest: kept until you create an account in the app, at which point the app's retention terms apply. If you never create an account, we delete your details after 12 months.
• Verification records: we keep a record that a check took place, and its outcome, for as long as it is needed to manage your access.
• Correspondence, feedback and support queries: kept for up to 24 months.
• Complaints: kept for up to six years where needed to defend a legal claim or to respond to a regulator.
• Marketing contacts: kept until you unsubscribe.

10. Your data protection rights

Which lawful basis we rely on may affect your rights. In brief, you have:

• The right of access - to ask for copies of your personal information, and for information about where we got it from and who we share it with.
• The right to rectification - to ask us to correct or complete personal information you think is inaccurate or incomplete.
• The right to erasure - to ask us to delete your personal information.
• The right to restriction of processing - to ask us to limit how we use your personal information.
• The right to object to processing - including where we rely on legitimate interests.
• The right to data portability - to ask us to transfer information you gave us to another organisation, or to you.
• The right to withdraw consent - at any time, where we rely on consent.

There are exemptions which mean you may not receive everything you ask for. You can read more about your rights, and the exemptions that may apply, on the ICO's website.

To make a request, email admin@informedhub.uk. We will respond without undue delay and in any event within one month.

11. Cookies and browser storage

The website uses a small number of cookies and browser storage items. Essential ones keep the site working and remember your appearance preference. Analytics cookies are off unless you accept them, and you can change your choice at any time. Full detail is in our Cookie Policy at informedhub.uk/cookies.

12. Automated decision-making

We do not make decisions about you using solely automated means that produce legal or similarly significant effects. Register checks are automated where a regulator provides an API, but a person reviews the outcome before access is granted or refused.

13. Children

The InforMed website is intended only for UK registered healthcare professionals and is not directed at anyone under 18.

14. Changes to this policy

We may update this policy. When we do, we will change the version and date shown at the top.

15. How to complain

If you have any concerns about our use of your personal data, contact us at admin@informedhub.uk.

If you remain unhappy after raising a complaint with us, you can complain to the Information Commissioner's Office.

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline: 0303 123 1113

Website: https://ico.org.uk/make-a-complaint/