Privacy Notice
Last updated: 6 August 2026
At Medica Universal Ltd we are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.
This notice covers information we collect from visitors to our website, people who contact us or make an enquiry, and people who enter our promotions and giveaways.
If you become a patient, a separate Patient Privacy Notice applies. It covers health information, your clinical record, and who we share it with. We provide it at registration and it is available on request.
Who we are
Medica Universal Ltd is the data controller for the information described here.
- Address: 19 Rosetta Road, Portsmouth PO4 8JY
- Email: hello@medicauniversal.co.uk
- Telephone: 07300 944955
- ICO registration number: ZB611565
- Responsible for data protection: Dr Perminder Sethi
What information we collect
- Name
- Email address
- Telephone or mobile number
- Social media username, where you contact us that way or enter a promotion
- Any information you choose to give us when you contact us, make an enquiry, book an appointment, complete a form, or enter a promotion or giveaway
- Information about how you use our website, collected through cookies
Please don’t send us health information through a general enquiry, a social media message or a giveaway entry. If you do, we will move the conversation to a secure route rather than continuing there, and the Patient Privacy Notice will apply to it.
Why we use it, and our legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Respond to your enquiry | So we can answer you | Legitimate interests — you have contacted us and expect a reply |
| Manage bookings and appointments | To provide the service you asked for | Performance of a contract, or steps taken at your request before entering one |
| Administer promotions, competitions and giveaways, and contact winners | To run the promotion fairly and tell you if you have won | Legitimate interests, and your consent where you entered by opting in |
| Send marketing | To tell you about services you have asked to hear about | Your consent |
| Improve our website and services | To make them work better | Legitimate interests |
| Meet legal and regulatory obligations | Because we have to | Legal obligation |
Where we rely on legitimate interests, we have considered whether our interest is fair to you, and you can object at any time — see Your rights.
You do not have to give us any of this information. If you don’t, we may not be able to answer your enquiry, book you in, or enter you into a promotion.
Who we share it with
We do not sell your personal information and we do not share it for anyone else’s marketing.
We do share it with:
- Our website, booking and communication providers, who host our systems and send our messages on our instructions
- Our payment provider, where you pay a deposit or a fee
- Social media platforms, where you contact us or enter a promotion through them — their own privacy notices also apply to that contact
- Professional advisers, such as our accountants or insurers, where necessary
- Regulators, authorities and the courts, where the law requires it
All of our suppliers act on our written instructions under contracts that restrict what they may do with your information.
Where your information is held
Most of our systems are hosted in the United Kingdom.
Some of our suppliers process information outside the UK. Our messaging platform processes telephone numbers and message content in Singapore, Belgium and the United States. Some social media and advertising platforms process information in the United States.
Where information is transferred outside the UK, we rely on the safeguards required by UK data protection law — standard contractual clauses and the UK International Data Transfer Addendum — and we assess the risks of those transfers. You can ask us for details.
Marketing
We only send marketing if you have asked to receive it.
You can unsubscribe at any time using the link in any message, or by emailing hello@medicauniversal.co.uk. Withdrawing consent does not affect anything we sent before you withdrew it, and it will never affect your care or a booking you have already made.
Promotions and giveaways
When you enter a promotion or giveaway we collect your name, contact details and sometimes your social media username, so we can run it fairly and contact the winner.
Entering a promotion does not sign you up to marketing. If we ask whether you would also like to hear from us, that is a separate choice and you can decline and still enter.
Cookies
Our website uses cookies to make it work and to help us understand how it is used. You can control cookies through your browser settings and through the cookie banner on our site.
How long we keep it
| Information | How long |
|---|---|
| Enquiries that do not lead to a booking | 12 months from your last contact |
| Booking and appointment records | As set out in the Patient Privacy Notice, once you become a patient |
| Promotion and giveaway entries | 12 months after the promotion closes, and longer for the winner where we need to evidence a prize was awarded |
| Marketing contact details | Until you unsubscribe, and for 12 months afterwards so that we do not contact you again by mistake |
| Payment and accounting records | 6 years, for tax purposes |
| Website analytics | As set out in our cookie information |
Your rights
Under UK data protection law you have the right to:
- Be told what we hold about you and how we use it — that is what this notice is for
- Ask for a copy of your personal information. Usually within one month, and free of charge
- Ask us to correct anything inaccurate
- Ask us to delete your information. For website enquiries, marketing and promotions we can usually do this. For clinical records the position is different and is explained in the Patient Privacy Notice, because we are legally required to keep them
- Ask us to restrict how we use your information while a query is resolved
- Object to us using your information where we rely on legitimate interests. You can object to direct marketing at any time and we will always stop
- Ask for your information in a portable format, where it applies
- Withdraw consent at any time, where consent is what we relied on
To exercise any of these, email hello@medicauniversal.co.uk. We may ask you to confirm who you are first, so that we don’t give your information to someone else.
Complaints
If you are unhappy with how we have handled your information, please tell us first at hello@medicauniversal.co.uk. We take it seriously and we will respond.
You can also complain to the Information Commissioner’s Office at any time, without coming to us first — ico.org.uk, or 0303 123 1113. Complaining to the ICO will never affect your care or your dealings with us.
Changes to this notice
We review this notice annually and whenever we change how we use information. The current version is always on our website, and the date at the top tells you when it last changed.