Privacy Policy

This Privacy Policy explains how UKMDO.com, operated by Innooi Ltd (“we”, “our”, “us”), collects, uses, and protects personal data when you use our website and related services.

We are committed to protecting your privacy and handling your data responsibly, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

UKMDO.com is an online platform that enables patients outside the UK to connect with licensed UK medical doctors for online second opinions consultations.

The website is owned and operated by:
Innooi Ltd
Registered in England and Wales, Company No. 15888720
Registered Office: 85 Great Portland Street
London, W1W 7LT
Email: contact@ukmdo.com

For all data protection matters, Innooi Ltd is the Data Controller.

2. What Data We Collect

We collect and process the following types of personal data:

A. Information you provide directly

Name, contact details, and country of residence
Medical information shared during consultations
Booking and payment details
Messages or attachments sent via the website
Account login details (if applicable)

B. Information collected automatically

When you visit our website, we automatically collect limited technical data, such as:

IP address and browser type
Operating system and device type
Pages visited and actions taken on the site
Cookie preferences and consent status

3. How We Use Your Data

We use your personal data to:

Facilitate online consultations with doctors
Process payments securely
Manage your account and booking history
Communicate with you regarding your appointments
Improve website functionality and security
Comply with our legal and regulatory obligations

We do not use your data for advertising, profiling, or automated decision-making.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

Performance of a contract – to provide the consultation or service you requested.
Consent – where you voluntarily share medical information or agree to receive communication.
Legal obligation – to comply with applicable health, data protection, and financial laws.
Legitimate interest – to maintain website security, prevent fraud, and improve service quality.

5. How We Share Your Data

We share your data only when necessary to deliver our services:

With your chosen doctor, for the purpose of your consultation.
With secure service providers (e.g., payment processors such as Stripe or PayPal).
With IT or data hosting providers (e.g., Wix) who help operate the website.

All third parties are required to handle your data securely and in compliance with UK GDPR.
We do not sell or rent personal data to any third party.

6. International Data Transfers

Where data is transferred outside the UK or EEA (for example, when accessed by patients abroad), we ensure appropriate safeguards are in place, such as:

Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner’s Office (ICO).
Secure encrypted transmission.

7. How We Protect Your Data

We use a combination of technical, organisational, and administrative measures to keep your data safe, including:

Encrypted connections (HTTPS and SSL).
Access controls for authorised staff and doctors only.
Secure data hosting with reputable UK/EU-based providers.
Regular system and policy reviews.

8. Cookies and Tracking Technologies

We use cookies to make the website work properly, remember preferences, and understand how visitors use it.
Cookies may also support essential features such as secure login and appointment booking.

You can manage your preferences via our site’s Privacy Settings or your browser settings.

9. Data Retention

We retain your data only as long as necessary to:

Provide the services you have requested, and
Meet our legal, accounting, and regulatory obligations.

Consultation records may be kept securely for a minimum period required under UK medical practice standards.

10. Your Rights

Under UK GDPR, you have the following rights:

To access the data we hold about you.
To request correction of inaccurate data.
To request deletion (“right to be forgotten”) where appropriate.
To restrict or object to processing.
To request data portability.

You can exercise these rights by emailing privacy@ukmdo.com
We may ask for proof of identity before fulfilling your request.

11. Children’s Privacy

Some consultations may involve patients under the age of 18.
We do not knowingly collect personal information directly from children.
All bookings and communications must be made by, or with the consent of, a parent or legal guardian.

We rely on the person making the booking to confirm they have lawful authority to do so.
At this time, we do not have a practical way to independently verify the age of account holders or confirm legal guardianship.

Where medical information about a child is shared as part of a consultation,
we handle it with the same level of confidentiality, security, and data protection as all other medical records.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect legal or operational changes.
The latest version will always be available on this page, with the date shown above.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact:

📧 Email: privacy@ukmdo.com