Privacy Policy

YH Health Ltd ('Hormox', 'we', 'our'), company number 17224482, is registered in England and Wales. Our registered address is 18 Coronation Road, London E13 9QB. We are the data controller for the personal data we process about you.

We are registered with the Information Commissioner's Office (ICO) as a data controller, registration number ZC169904. Our data protection contact is Yusuf Daud, reachable at support@hormox.com.

We collect the following categories of personal data:

• Identity data - name, date of birth, gender.
• Contact data - email address, postal address, telephone number.
• Health data - medical history, medications, consultation notes, blood test results, photographs (where relevant).
• Financial data - payment card details processed via Stripe. We do not store raw card data.
• Technical data - IP address, browser type, device identifiers, usage data.

We process your data to:

• Deliver clinical consultations and prescriptions.
• Fulfil and dispatch medication orders.
• Communicate about your care.
• Comply with legal and regulatory obligations (GPhC, MHRA).
• Improve our services.
• Send marketing communications (only with your explicit consent, which you can withdraw at any time).

We do not make decisions about your treatment by automated means alone. Every prescribing decision is made personally by a clinician.

Health data is processed under Article 9(2)(h) UK GDPR, processing necessary for the provision of health care or treatment by, or under the responsibility of, a health professional (our GPhC-registered pharmacist independent prescriber). Where we rely on this condition we also meet the associated condition in Schedule 1 of the Data Protection Act 2018.

All other data is processed under Article 6(1)(b) (performance of a contract), Article 6(1)(c) (compliance with a legal obligation), or Article 6(1)(a) (consent, for example for marketing).

Your data may be shared with:

• Our GPhC-registered pharmacist independent prescriber.
• Our GPhC-registered pharmacy partner, who dispenses your medication.
• Accredited laboratories that process your blood tests.
• Delivery and courier providers, to dispatch your medication.
• Your GP, with your consent or where clinically necessary to protect your vital interests, to support safe prescribing.
• Our electronic health record system provider.
• Our payment processor, Stripe.
• Regulatory bodies (such as the GPhC) where required by law.

We never sell your personal data to third parties under any circumstances.

We do not transfer your personal data outside the United Kingdom. If this changes, we will update this policy and ensure an appropriate safeguard is in place first (such as UK 'adequacy' regulations, the International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum).

Medical records are retained for a minimum of 8 years from last contact (or until age 25 for patients who were minors at the time of treatment), in line with the NHS Records Management Code of Practice for Health and Social Care, which we follow as our retention standard.

Under UK GDPR, you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Erasure, subject to our legal obligations to retain medical records.
• Restrict processing.
• Data portability.
• Object to processing.

To exercise any of these rights, please email support@hormox.com. We will respond within one calendar month.

We use essential cookies for the website to function and analytics cookies (with your consent) to understand how the site is used. See our Cookies Policy for full details and how to manage your preferences.

We may update this policy periodically. Material changes will be communicated by email to registered patients. Continued use of our services following notification constitutes acceptance of the updated policy.

For privacy queries, please contact: support@hormox.com.

If you are unhappy with how we handle your data, you can complain to the ICO at ico.org.uk or by telephone on 0303 123 1113. See also our Complaints procedure.