Your information, handled with care
Privacy Policy
This policy explains what information we collect, why, who we share it with, and your rights. Last updated: 12 September 2026.
Who we are
2222Group LTD, trading as Believe Health ("we", "us"), is the data controller for the personal information described here. Company number 15938907; registered office 20 Chadwell Avenue, Romford, RM6 4QH. Contact for privacy matters: info@believehealth.co.uk.
What we collect
Contact and identity details (name, date of birth, contact details, postcode, ID verification information); health information you provide in questionnaires and consultations (conditions, medicines, allergies, weight and height, relevant history); details of consultations, prescriptions and supplies; payment information (processed by our payment provider; we do not store full card numbers); and basic technical information needed to keep the Website working and secure.
Why we use it, and our lawful bases
We use your information to provide our service safely: to assess suitability, provide consultations, issue prescriptions, arrange dispensing and delivery, provide follow-up care, take payment, keep required clinical records, and respond to queries and complaints. Our lawful bases under UK GDPR are: performance of a contract (Article 6(1)(b)); our legitimate interests in running the service safely (Article 6(1)(f)); compliance with legal obligations, including record-keeping required of prescribers and pharmacies (Article 6(1)(c)); and, for your health information, the provision of health care by or under the responsibility of a professional subject to a duty of confidentiality (Article 9(2)(h)). Where we rely on your consent (for example, informing your GP, or sending occasional service updates), you can withdraw it at any time.
Who we share it with
Only what's needed, only where needed: our dispensing pharmacy (Pharmacy2U) to dispense and deliver your prescription; your GP, with your consent; an identity-verification provider where used; our payment provider; couriers (name and delivery address only); our secure IT and email providers; and regulators or authorities where the law requires it, or to protect you or others from serious harm. We never sell your information, and we never share it for third-party marketing.
How long we keep it
Clinical records are kept for 8 years after your last contact with us, in line with recognised healthcare records guidance, and prescription records as required by pharmacy legislation. Enquiry emails that don't become patient records are deleted after 12 months. Marketing preferences are kept until you unsubscribe.
How we protect it
Your information is held on secure, access-controlled, UK/EEA-based systems, encrypted in transit, and accessible only to those involved in your care or the running of the service.
Cookies
This Website currently sets no advertising or analytics cookies.
Your rights
You have the right to access your information, to have inaccuracies corrected, to request deletion where applicable, to restrict or object to certain processing, to data portability, and to withdraw any consent you've given. Note that we may need to retain clinical records even after a deletion request, because the law requires prescribers to keep them. To exercise any right, email info@believehealth.co.uk and we will respond within one month.
Complaints
If you're unhappy with how we've handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner's Office: ico.org.uk.