Return to Home Page

Privacy Policy

Last updated: July 2026

Who is responsible for your data

David Hover is the data controller for the personal information held about you, and is registered with the Information Commissioner's Office. This means he decides how and why your information is used, and is responsible for keeping it safe. Contact details are at the bottom of this page.

What information we hold

Depending on your circumstances, we may hold:

  • your name, date of birth, address, telephone number and email address
  • the name and address of your GP
  • details of your health, medical history, symptoms and lifestyle, including anything relevant you tell us during a consultation
  • notes of your examinations, diagnosis, treatment and progress
  • the results of any imaging or tests, and correspondence with other healthcare professionals
  • a record of your appointments and payments
  • any correspondence between us

Most of this comes directly from you. Occasionally we receive information about you from another healthcare professional, for example if you have been referred to us or if we have asked for a report with your permission.

Why we collect your personal data and what we do with it

When you give us your personal details, we store and use them for the following reasons. The terms in brackets are the ones used in UK data protection law.

  1. We need to collect information about your health in order to provide you with the best possible treatment. Your requesting treatment and our agreeing to provide it forms a contract between us (Article 6(1)(b) — contract). You can of course refuse to provide the information, but if you did we would not be able to treat you.
  2. Health information is a special category of data, and we rely on the specific permission the law gives healthcare providers to hold it for the purposes of providing health care and treatment (Article 9(2)(h), together with Schedule 1 Part 1 of the Data Protection Act 2018). Everyone with access to your records is bound by a duty of confidentiality.
  3. We contact you to confirm appointments and to update you on matters relating to your care. This is in your interests as well as ours (Article 6(1)(f) — legitimate interests).

We do not send marketing, and we do not sell, rent or share your details with anyone for marketing purposes. The only messages you will receive from us relate directly to your care.

How long we keep your records

Professional guidance and our indemnity arrangements require us to keep your clinical records for eight years after the date of your last appointment. Where you were under 18 at the time of your last appointment, we keep them until your 25th birthday, or your 26th birthday if you were 17 at the time. After that period your records are securely destroyed. If you would like your records deleted before then, please ask, and we will do so wherever the law allows.

How your records are kept

Your records are held electronically using a specialist clinical records provider, who is contractually required to keep your information secure and to process it only on our instructions. Access is password protected and passwords are changed regularly. Any paper records are kept in locked storage, and the premises are locked outside working hours.

Who has access to your data

We will never share your data with anyone who does not need access to it without your written consent. Only the following have routine access:

  • David Hover, in order to provide your treatment
  • The clinical records provider who stores our files on our behalf
  • Our bookkeeper or accountant, who may see your name and payment details but not your clinical notes

From time to time we may need to engage a consultant whose work gives them access to your personal data, though not to your clinical notes. Where that happens, we make sure they understand the information is confidential and we require them to sign a non-disclosure agreement.

We will disclose your information without your consent only where we are legally required to, or where there is a serious risk of harm to you or to someone else.

This website

This website does not use cookies, and does not track or profile you. There are no contact forms — the links on the site simply open your own email or phone application, and nothing is submitted to us through the site itself.

The site is hosted by Cloudflare, whose servers automatically record limited technical information such as your IP address and the pages requested. This is used only to keep the site running and to protect it from attack, and we rely on our legitimate interests in the security of the site to do so (Article 6(1)(f)).

If you email or message us, we keep that correspondence so that we have a record of what was discussed. If you go on to become a patient, it forms part of your file. If you do not, we delete it once it is no longer needed.

Automated decisions

We do not use your data to make any automated decisions about you, and we do not use it for profiling.

Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you
  • have factual errors corrected
  • ask us to erase your records, once the legal retention period has passed
  • ask us to restrict how we use your data while a query is being resolved
  • object to our use of your data where we rely on legitimate interests
  • ask us to transfer your data to another provider in a usable format

You also have the right to complain to the Information Commissioner's Office, as set out below.

There is no charge for exercising any of these rights. We will respond within one month. If your request is particularly complex, or if you have made several, we may need up to two further months, in which case we will tell you within the first month and explain why.

If you are unhappy

We want you to be confident that we are treating your personal data responsibly, and that the only people who can access it are those with a genuine need to do so. If you think we have handled your information poorly, please tell us first so that we have the chance to put it right:

David Hover
Hover Health Ltd
Penrose House, 67 Hightown Road
Banbury, OX16 9BE
contact@davidhover.co.uk

If you are not satisfied with our response, you can raise the matter with the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.