top of page
privacy policy

Privacy Policy

Who We Are

 

Hesta Health Limited (“we”, “us”, “our”) is committed to protecting your personal information. This privacy notice explains what personal data we collect about you, why we process it, how we use it, and the measures we take to ensure compliance with applicable laws.

 

We are registered with the Information Commissioner’s Office (ICO) as a data controller (registration number: ZB905449).

 

What Data We Collect

 

We collect your personal data primarily when you:

  • Register for our services or create an account

  • Book appointments or consultations

  • Undergo health assessments

  • Visit our website or use our mobile application

  • Participate in research programs or beta testing

 

We collect and use the following categories of personal data: 

 

  • Communication Data

       Contact details including email address, telephone number, country and region, marketing preferences, and         

       communications with our support team. 

  • Health Data

       Information about your pregnancy, postpartum health, medical history, current conditions, medications, and health
       assessments. 

  • Identity Data

       Name, date of birth, and other identifying information. 

  • Lifestyle Data

       Information about your behavior, lifestyle choices, and circumstances relevant to your postnatal health. 

  • Technical Data

       Data about your use of our platform, device information, IP addresses, cookies, and website analytics.

​

How We Use Your Data

​

We use your personal data to:

  • Decide which care is most appropriate for you, and how we can best help you

  • Provide postnatal healthcare services, including the provision of clinical services, management of appointments and consultations and maintenance of medical records

  • Develop and improve our healthcare services

  • Test and enhance our digital platforms

  • Conduct research to advance postnatal care

  • Contact you to offer you opportunities to participate in user research or beta testing, if you have opted in for such contact

  • Decide which research streams are most suitable for you

  • Provide you with marketing information about our services

  • Send you updates and information about our services if you've opted in

  • If you have expressed interest in doing so, match you with and communicate with you about opportunities to work with us

 

Lawful Basis for Processing

 

We process your data on the basis of your consent to do so for the purposes we have outlined above.

 

Marketing

 

We will only send you marketing communications if you have opted in. You can withdraw your consent at any time by clicking “unsubscribe” in our emails or contacting us.

 

Storing and Sharing Your Data

 

We do not sell your data. We may share your data with:

  • Other healthcare providers (with your explicit consent) to facilitate referrals, coordinated care and information transfers

  • Service providers who help us operate our website and services (e.g., hosting, email delivery, payment processors, marketing communications providers). All suppliers are contractually bound to protect your data and cannot use it for their own purposes.

  • Where required by law or to meet legal obligations, such as providing records to regulatory bodies like the Care Quality Commission.

 

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

 

International Transfers

 

If we transfer your data outside the UK or EEA, we ensure appropriate safeguards are in place.

 

How Long We Keep Your Data
 

We keep your data for as long as you remain opted in, or as required to comply with our legal obligations.

 

If Hesta Health or its assignors ceases trading, we will notify you and give you 60 days to download or otherwise export your data. After this date, we won’t keep any copies, and any data will be securely deleted. Where the law requires certain records to be preserved (for example, some clinical records), we’ll transfer them to an appropriate custodian.

 

Your Rights

 

You have specific rights regarding your personal data.  You have the right to:

  • Request confirmation of what personal data we process 

  • Receive a copy of personal data you provided us in a structured, common format

  • Correct or update your data if it is inaccurate or incomplete

  • Request deletion of your data, subject to some exceptions for legal reasons

  • Object to or restrict processing

  • Withdraw consent (where processing is based on consent)

  • Lodge a complaint with the ICO at www.ico.org.uk/make-a-complaint

 

Contact Us

 

If you have questions or wish to exercise your rights, contact us at: privacy@hesta.health or write to us at:

 

Hesta Health

71-75 Shelton Street

Covent Garden

London

WC2H 9JQ

 

Changes to This Notice

 

We may update this notice from time to time. The latest version will always be posted on our website.

 

For substantive changes, we will notify you in advance and explain the impact.

bottom of page