Up to 40% off savings with our new IV Packages!
Claim Your Savings
Book Service

Privacy Policy

Drip Hydration UK – Privacy Policy

Drip Hydration UK (“Medical Group Partners LTD”, “we”, “our”, or “us”) operates the website located at https://driphydration.co.uk/ and provides mobile and in-home IV therapy and related healthcare services across the United Kingdom (collectively, the “Services”). We are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, book our Services, or communicate with us.

By using our website or Services, you agree to the practices described in this Privacy Policy. If you do not agree, you should discontinue use of our website and Services.

 

1. Data Controller

Drip Hydration UK is the data controller responsible for your personal data.

Drip Hydration UK
Lancashire Ct
London W1S 1EZ
United Kingdom
Phone: +44 20 8051 9337
Email: [email protected]

 

2. Who This Policy Applies To

This Privacy Policy applies to:

  • Users of our website and online booking system

  • Clients receiving IV therapy or related medical services

  • Individuals contacting us for enquiries, support, or marketing communications

  • Individuals accompanying clients (e.g., legal guardians) when applicable

 

3. Age Restrictions

Our Services are intended for individuals 18 years or older.
We may provide services to individuals aged 16–17 only with a parent or legal guardian present and providing consent.

We do not knowingly collect personal data from children under 16.

 

4. Types of Personal Data We Collect

We may collect the following categories of personal data:

A. Personal Identification & Contact Information

  • Full name

  • Email address

  • Phone number

  • Residential address or treatment location

  • Date of birth

B. Account & Booking Information

  • Login credentials

  • Appointment history

  • Communications and enquiries

C. Payment Information

Processed securely by third-party payment processors (e.g., Stripe).
We do not store full card numbers.

D. Health & Medical Data (Special Category Data)

As a healthcare provider, we collect medically relevant information, including:

  • Medical history and health conditions

  • Symptoms, questionnaires, and assessments

  • Vital signs

  • Treatment notes

  • Images or videos provided for medical purposes

  • Information related to emergency contacts

  • Information necessary for safeguarding obligations

This data is processed by our registered clinicians in accordance with the UK GDPR Article 9.

E. Identity Verification Data (where required)

  • ID documents (passport, driver’s licence, etc.)

  • ID images

  • Information needed to verify eligibility for treatment

Note: Drip Hydration UK does not perform biometric facial-recognition profiling. If identity verification partners process biometric data, they do so under their own privacy terms.

F. Technical & Usage Data

  • IP address

  • Browser type

  • Device identifiers

  • Website usage patterns

  • Cookie data and analytics

G. Marketing & Communications Data

  • Preferences

  • Engagement with emails and SMS

  • Interactions with marketing content

 

5. How We Collect Personal Data

We collect data through:

  • Direct interactions (booking, consultations, assessments, phone calls, email, SMS)

  • Website forms and account registration

  • Cookies, tracking technologies, and analytics

  • Clinicians who record information during treatment

  • Third-party service providers (e.g., Stripe, Klaviyo, Google Workspace)

  • Identity verification or fraud-prevention partners (when applicable)

 

6. Legal Bases for Processing (UK GDPR)

We process personal data under the following lawful bases:

Article 6 Bases

  • Contract: to provide healthcare services and manage bookings

  • Consent: for marketing communications or optional data uses

  • Legal obligation: compliance with healthcare regulatory requirements

  • Legitimate interests: service improvement, fraud prevention, security

Article 9 Bases (Special Category Data – Health Data)

  • Provision of health or social care (Article 9(2)(h))

  • Public interest in the area of public health (Article 9(2)(i))

  • Explicit consent, where required

  • Compliance with CQC, clinical, safeguarding, and professional standards

 

7. How We Use Your Information

We may use your information for:

  • Providing medical assessment, diagnosis, and treatment

  • Managing appointments and in-home visit logistics

  • Administering your account

  • Processing payments

  • Verifying identity where necessary

  • Communicating regarding your care, updates, or follow-up instructions

  • Customer support

  • Service optimisation and internal analytics

  • Marketing communications (where consented)

  • Ensuring safety of clinicians and clients

  • Regulatory compliance (CQC, safeguarding, record-keeping requirements)

We may also anonymise data for service improvement, analytics, or reporting.
Anonymised data cannot identify you and may be used freely.

 

8. Sharing Your Personal Data

We only share personal data when necessary and lawful. This may include sharing with:

A. Healthcare Staff

  • Employed nurses

  • Employed doctors

  • Clinical supervisors

  • Emergency services, when required

B. Service Providers

These may include companies providing:

  • Payment processing (e.g., Stripe)

  • Email and SMS services (e.g., Klaviyo)

  • Web hosting, scheduling, analytics

  • Identity verification (when used)

  • Cloud storage (Google Workspace)

All providers are bound by data-processing agreements compliant with UK GDPR.

C. Legal & Regulatory Bodies

  • Care Quality Commission (CQC)

  • Health and safety authorities

  • Law enforcement, when required

  • Courts or regulatory bodies

D. Corporate Transactions

If Drip Hydration UK undergoes merger, acquisition, restructuring, or asset transfer, personal data may be transferred under confidentiality safeguards.

We do not sell personal data.

 

9. International Data Transfers

Some of our providers (e.g., Stripe, Google, Klaviyo) are headquartered in the United States or may store data internationally.

Where data is transferred outside the UK, we use one or more approved safeguards:

  • Standard Contractual Clauses (SCCs) + UK Addendum

  • Provider adherence to ICO-approved frameworks

  • Binding corporate rules (where applicable)

You may request further details about international transfer safeguards by contacting us.

 

10. Data Retention

We retain personal data only as long as necessary.

Medical records:

Kept for a minimum of 7 years in accordance with clinical and legal requirements.

Account data:

Retained until your account is deleted or becomes inactive for an extended period.

Marketing data:

Stored until you withdraw consent or opt out.

Backup copies may persist temporarily in disaster-recovery systems.

 

11. Data Security

We implement technical and organisational measures to safeguard your data, including:

  • Encrypted storage

  • Access controls and authentication

  • Clinician confidentiality obligations

  • Secure cloud infrastructure

  • Regular security reviews

No data transmission over the internet is entirely secure, but we maintain rigorous protections appropriate to healthcare-level data.

 

12. Your Rights Under UK GDPR

You have the following rights:

  • Right of access – to request copies of your data

  • Right to rectification – to correct inaccurate data

  • Right to erasure – where legally applicable

  • Right to restriction – to limit processing in certain circumstances

  • Right to object – to certain types of processing, including direct marketing

  • Right to data portability

  • Right to withdraw consent (where processing is based on consent)

  • Right to lodge a complaint with the ICO

Information Commissioner’s Office (ICO)
www.ico.org.uk
Telephone: +44 303 123 1113

We may require identity verification before responding to a rights request.

 

13. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable site functionality

  • Analyse website usage

  • Improve performance

  • Support marketing (only with consent when prompted)

You may manage cookies through your browser settings or via our website consent banner when applicable.

 

14. Marketing Communications

We will only send email or SMS marketing when:

  • You have provided consent, or

  • It is permitted under the soft opt-in exemption for existing customers

You may withdraw consent or opt out at any time by:

  • Clicking “unsubscribe” in our emails

  • Replying STOP to SMS

  • Contacting us at [email protected]

 

15. Third-Party Websites

Our website may contain links to third-party sites.
We are not responsible for their privacy practices.
You should review their policies separately.

 

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a new “Last Updated” date. Continued use of our website or Services constitutes acceptance of the updated policy.

 

17. Contact Information

For any questions, concerns, or rights requests, please contact:

Drip Hydration UK
Lancashire Ct
London W1S 1EZ
United Kingdom
Phone: +44 20 8051 9337
Email: [email protected]

Last Updated: December 10, 2025