Health3 is the trading name of Health International Holdings Ltd, a company registered in Scotland (company number SC861205), with its registered office at 480 Kilmarnock Road, Glasgow, G43 2BW. Our clinic is located at 241 St Vincent Street, Glasgow, G2 5QY.

This policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book an appointment, or receive care from us. It applies to all visitors, patients and website users.

Health International Holdings Ltd, trading as Health3, is the data controller for the personal information described in this policy.

Health3 is registered with Healthcare Improvement Scotland as an independent healthcare service.
Contact us about your data:
• Email: privacy@health3.co.uk
• Post: Health3, 241 St Vincent Street, Glasgow, G2 5QY
• Phone: 0141 374 0768

• Contact and identity information: name, date of birth, address, email, phone number.
• Booking and appointment information: service booked, appointment history, attendance record.
• Health and clinical information: medical history, examination findings, test results, treatment records and consent records. This is “special category” data under data protection law.
• Payment information: processed by our payment provider — we do not store full card details ourselves.
• Technical information: IP address, browser type and cookie data when you use our website.
• Communications: records of calls, emails and messages between you and Health3.

We use your information to:
• Provide, manage and follow up on the clinical services you book with us (legal basis: provision of health care, Article 9(2)(h) UK GDPR, together with our duty of confidentiality).
• Contact you about appointments and results, and — where you consent — share information with your GP or another healthcare provider (legal basis: consent, and see the safety-critical override in section 4).
• Process payment for services (legal basis: performance of a contract).
• Meet our legal and regulatory obligations, including to Healthcare Improvement Scotland, the GMC, and our insurers (legal basis: legal obligation).
• Send you marketing communications, where you have opted in (legal basis: consent — you can withdraw this at any time).
• Improve our website and services (legal basis: legitimate interests).

Where you consent, we share relevant results and findings with your GP or another healthcare provider you nominate. Separately from that consent, if we identify a finding we consider safety-critical, we may contact your GP, NHS services, or emergency services in your interest, even where you have not opted in to routine sharing. This safety-critical override is explained fully as part of our consent process — see our Consent Policy.

Blood and other samples taken for health assessments are analysed in our own in-house laboratory. We do not send samples to third-party laboratories, and samples are destroyed after analysis. We do not retain samples for any secondary use.

• Clinicians and staff directly involved in your care.
• Our booking and clinical records platform(s), acting as data processors on our instructions.
• Our payment processor, to process payments.
• Your GP or another provider, in the circumstances described in section 4.
• Our insurers, regulators (including Healthcare Improvement Scotland) and professional bodies (including the GMC), where required.
• Professional advisers and law enforcement, where required by law.
We do not sell your personal information to any third party.

Your data is stored in the UK and/or EEA.

We retain clinical records for 7 years in line with our professional and regulatory obligations.
Booking and contact information is retained for as long as you remain an active client and for a reasonable period afterwards for legal and administrative purposes.

Subject to certain exemptions (particularly around clinical records), you have the right to:
• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to erase your information, where this does not conflict with our legal duty to retain clinical records.
• Object to or restrict certain processing.
• Request a copy of your information in a portable format.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us using the details in section 1.

If you are unhappy with how we have handled your personal information, please contact us first so we can try to resolve this. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

TO CONFIRM BEFORE PUBLISHING: this section needs final wording once Nexus confirms the site's actual cookie/analytics stack (e.g. Google Analytics, ad pixels). Placeholder: “Our website uses cookies to help it function and to understand how visitors use it. You can control cookies through your browser settings. See our cookie banner/settings for full details.”

Health3 does not provide services to anyone under the age of 18, in line with our Healthcare Improvement Scotland registration, and we do not knowingly collect personal information from children.

We may update this policy from time to time. The latest version will always be available on our website.

Last Updated: August 2026