Privacy Notice

Any reference to "the legislation" shall include:
‍

• The UK General Data Protection Regulation (UK GDPR)
  
• The General Data Protection Regulation (GDPR)
  
• The Data Protection Act 2018
  
• The Privacy and Electronic Communications Regulations 2003 (PECR)
  
• And any subsequent or applicable data protection legislation.
  
  

Who We Are

Dr Kumaran Ltd is a healthcare company offering longevity and functional medicine services, as well as related engagements.

‍

Data Protection Principles

We process and store all personal data in accordance with the following principles:
‍

• Processing is fair, lawful, and transparent.
  
• Data is collected for specified, explicit, and legitimate purposes.
  
• Data collected is adequate, relevant, and limited to what is necessary.
  
• Data is accurate and kept up-to-date. Any inaccuracies will be rectified without undue delay.
  
• Data is not retained longer than necessary unless required by law.
  
• Data is processed securely, protecting against unauthorised or unlawful processing, accidental loss, destruction, or damage.
  
• We comply with all relevant legislation concerning international transfers of data.
  
  

Personal Data We Collect

To provide our services, we may need to process personal data, including:
‍

• Basic data: name, date of birth, contact information, location, GP details, and payment details.
  
• Special category data: health and genetic data, where required to provide healthcare services.
  
  

Confidentiality & Security

Confidentiality is our highest priority. We have strict internal policies, procedures, and controls to protect your data against accidental destruction, misuse, unauthorised disclosure, loss, or damage.
‍

Where third parties are engaged (e.g. Contractors, IT providers), they act under our instructions and are contractually bound to maintain confidentiality and implement security measures.

‍

‍

‍

‍

We use Cloudflare Turnstile to protect our forms from spam and abuse. This service does not use cookies or track users.”

‍

‍

‍

Your Rights

As a data subject, you have the following rights:
‍

• Access to the personal data we hold about you.
  
• Rectification of inaccurate or incomplete data.
  
• Erasure of your data in certain circumstances (e.g. when no longer required, or if consent is withdrawn).
  
• Restriction of processing in certain circumstances.
  
• Data portability, allowing transfer of your data to another organisation.
  
• To object to certain processing activities (e.g. direct marketing).
  
  

We may request proof of identity when you exercise your rights.
‍

‍

If You Are a Website User

What we collect: name, address, email, company name, telephone number, IP address, information submitted via contact forms, including enquiry details and preferred clinic location.‍

How we collect it: via contact forms, event registrations, newsletter subscriptions, or surveys.‍

Why we collect it: to respond to queries, arrange consultations, provide therapeutic products, register for events, or send newsletters.

‍How we use your data: to respond to enquiries and direct individuals to the appropriate clinic or service location.‍

Lawful basis: legitimate interests, performance of a contract, consent (for marketing), or provision of healthcare.‍

Who we share data with: Dr Kumaran Ltd employees, trusted contractors, HUM2N Ltd, Function 365 (patient portal provider), and Formspark (website host, with Squarespace domain services).

‍

If You Are a Patient/Customer

What we collect: name, address, email, company name, telephone number, IP address, information submitted via contact forms, including enquiry details and preferred clinic location.‍

How we collect it: when you place an order, book/attend a consultation, or attend an event.‍

Why we collect it: to provide healthcare services, process orders, and recommend appropriate products.‍

‍How we use your data: to respond to enquiries and direct individuals to the appropriate clinic or service location.‍

Lawful basis: legitimate interests, performance of a contract, consent (for marketing), and provision of healthcare.‍

Who we share data with:
‍

• Internal staff and approved contractors (all under confidentiality agreements).
  
• Function 365 (customer portal).
  
• Healthcare professionals for onward referrals (with consent).
  
• Your GP (in certain circumstances, with consent).
  
• Local authorities (rarely, in safeguarding cases).
  
• Squarespace Workspace, Formspark and other hosting services, in line with their own privacy policies.
  
  

We will not share your data with any third party without your consent unless required by law or in exceptional circumstances (e.g. safeguarding, public interest, legal obligations).

‍

Where relevant, enquiries may be directed to clinics or partners outside the UK. Any personal data shared internationally is handled in accordance with applicable data protection laws and appropriate safeguards.

‍

Consent

By consenting to this Privacy Policy, you permit us to process your personal and special category data for the purposes outlined above. Consent for marketing can be withdrawn at any time.

‍

Changes to This Policy

We review our privacy notice regularly and will notify you of any material changes to how we process your data.

‍

Contact Us

If you wish to exercise your rights or raise a concern, please contact:

Dr Kumaran Ltd
310 Harrow Road
Wembley
Middlesex, England
HA9 6LL
Email: contact@drkumaran.com

If you remain dissatisfied, you have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Phone: 0303 123 1113