Rennovare Ltd

Last updated: 19th of  July 2026
 

Rennovare Ltd respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, contact us, register with our service, or receive care from us.
 

For the purposes of data protection law, Rennovare Ltd, is the data controller responsible for your personal information.

Company name: Rennovare Ltd
Trading name: Rennovare
Company number: 17334048
Registered office: 10 Kingsmead Square, Bath, BA1 2AB
ICO registration number: Registered
Contact email: dale@rennovare.co.uk
 

1. What Personal Information We Collect
 

We may collect, use, store, and process different types of personal information, including:

Identity Data

This may include your first name, surname, date of birth, gender, and any information needed to identify you safely.

Contact Data

This may include your address, email address, telephone number, emergency contact details, GP details, preferred pharmacy, and preferred method of communication.

Health and Medical Data

This may include your medical history, current symptoms, medications, allergies, observations, treatment plans, clinical notes, referrals, consent forms, photographs where clinically relevant, and any other information required to provide safe clinical care.

Health data is classed as special category data under UK GDPR and is handled with additional protection.

Appointment and Service Data

This may include details of appointments, home visits, virtual consultations, prescriptions, treatment provided, follow-up plans, and communications relating to your care.

Payment and Transaction Data

This may include payment records, invoices, receipts, and details of services purchased. We do not store full card payment details unless this is handled securely through an approved payment provider.

Technical Data

This may include your IP address, browser type, device information, operating system, time zone, and how you use our website.

Usage Data

This may include information about how you use our website, online forms, booking systems, and services.

Marketing and Communication Data

This may include your preferences for receiving updates, newsletters, service information, or marketing communications from us.
 

2. How We Use Your Information
 

We use your personal information to:

• Register you as a patient or service user

• Contact you about your enquiry, registration, or appointment

• Provide clinical care, advice, treatment, prescriptions, and follow-up

• Maintain accurate medical records

• Communicate with your GP, pharmacy, hospital, or other healthcare professionals where appropriate

• Arrange appointments, home visits, and ongoing care

• Send appointment confirmations and reminders

• Respond to questions, complaints, or feedback

• Process payments and maintain financial records

• Comply with legal, professional, regulatory, and insurance requirements

• Improve our website, systems, and services

• Send marketing communications only where you have consented or where we are otherwise legally permitted to do so
   

3. Our Lawful Basis for Processing Your Data
 

We process your personal data under the UK General Data Protection Regulation and the Data Protection Act 2018.

Depending on the reason for processing, we may rely on the following lawful bases:

• Consent — where you have given clear permission for us to use your information for a specific purpose.

• Contract — where processing is necessary to provide services you have requested.

• Legal obligation — where we are required to process information to comply with the law.

• Legitimate interests — where we have a legitimate business or clinical reason to process your information, provided your rights do not override this.

• Vital interests — where processing may be necessary to protect your life or someone else’s life.

For health and medical information, we may also rely on special category conditions, including where processing is necessary for the provision of health or social care, medical diagnosis, treatment, or the management of healthcare services.
 

4. How We Store and Protect Your Data
 

We take the security of your personal and medical information seriously.

Rennovare uses secure clinical practice software provided by Pabau to help manage patient records, appointments, consent forms, communications, and clinical documentation.

Pabau acts as a data processor on our behalf and provides systems designed to support GDPR compliance, secure record keeping, access controls, audit logs, data backups, and encrypted communications where appropriate.

We use appropriate technical and organisational measures to protect your information, including:

• Secure electronic clinical records

• Password-protected systems

• Restricted staff access based on role

• Audit trails where available

• Secure data backups

• Staff confidentiality obligations

• Policies for managing data breaches and security incidents

• Secure handling of clinical photographs, consent forms, and treatment records

We do not sell your personal information.
 

5. Paperless Clinical Records
 

Rennovare aims to operate a secure paperless records system where possible. Information stored may include:

• Registration forms

• Medical history forms

• Consultation notes

• Treatment plans

• Prescriptions and medication records

• Consent forms

• Clinical photographs where required

• Appointment records

• Communication records

• Payment and purchase records

• Any correspondence relating to the care or services we provide
   

6. Sharing Your Information
 

We will only share your personal information where necessary, appropriate, and lawful.

We may share information with:

• Your GP

• Pharmacies

• Hospitals or specialist services

• Laboratories or diagnostic providers

• Other healthcare professionals involved in your care

• Emergency services where clinically necessary

• Regulatory bodies where required

• Insurers, legal advisers, or professional advisers

• IT, software, booking, payment, or administrative service providers

• Pabau, as our clinical software provider

We may also share information if we are legally required to do so, if there is a safeguarding concern, if there is a serious risk of harm, or if disclosure is necessary in the public interest.

Where possible, we will discuss information sharing with you first. However, there may be circumstances where we are required to share information without your consent, such as a medical emergency, safeguarding concern, or legal obligation.
 

7. Marketing Communications
 

We may contact you with information about our services, updates, or relevant healthcare information if you have chosen to receive this.

You can opt out of marketing communications at any time by contacting us or using the unsubscribe option where available.

We will never sell your details to third-party marketing companies.
 

8. How Long We Keep Your Information
 

We keep your personal and clinical records only for as long as necessary to provide care, meet legal and professional obligations, handle complaints, and comply with insurance and regulatory requirements.

Clinical records are usually retained for a minimum period in line with professional, legal, and healthcare record-keeping requirements. In many cases, this may be up to 10 years after your last contact with us, unless we are legally required to keep them for longer.

When information is no longer required, it will be securely deleted or anonymised.
 

9. Data Breaches
 

If a data security incident occurs, we will investigate it promptly. Where required, we will report relevant breaches to the Information Commissioner’s Office and notify affected individuals in accordance with UK data protection law.
 

10. Your Rights
 

Under data protection law, you have rights in relation to your personal information. These may include the right to:

• Request access to the information we hold about you

• Request correction of inaccurate or incomplete information

• Request deletion of your information in certain circumstances

• Request restriction of processing

• Object to certain types of processing

• Request transfer of your information

• Withdraw consent where we rely on consent

• Complain to the Information Commissioner’s Office

Please note that some rights may be limited where we are required to keep clinical records for legal, professional, insurance, or patient safety reasons.
 

11. Accessing or Updating Your Information
 

If you would like to request access to your records, update your details, withdraw consent, or ask us to delete information where legally possible, please contact us by email

Email: dale@rennovare.co.uk
 

12. Complaints
 

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office:

Information Commissioner’s Office
Website: ico.org.uk
Telephone: 0303 123 1113
 

13. Changes to This Privacy Policy
 

We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal obligations, or regulatory requirements.

The latest version will always be available on our website.