This notice is for people who visit our website, contact us, or deal with us on behalf of a healthcare provider or supplier. If you are a patient using a Doccla device, this notice does not apply to you. Please see our Patient Privacy Notice instead.
We do not collect health information about you through this route. If you send us health information unprompted, we will delete it, or pass it to the right clinical team if it concerns someone's safety, and we will tell you which we have done.
We are Doccla UK Limited (referred to as Doccla, we, us and our in this Privacy Notice), a company incorporated in England and Wales with company registration number 12206481 and whose registered office address is 184 Shepherds Bush Road, Hammersmith, London, England, W6 7NL.We are the data controller for the personal data described in this notice.
We collect and process the following types of personal data when you interact with us on the website or otherwise with a view to entering into a business relationship:
We collect this when you complete a form on our website, correspond with us, meet us at an event, or deal with us in the course of a commercial relationship. We may also obtain information from publicly available sources, including public databases, registers and records.
We process your personal data to:
Marketing: we will ask for your consent before sending you marketing by email, unless you have previously enquired about or negotiated for a similar service with us, in which case we may rely on the soft opt-in in regulation 22(3) of the Privacy and Electronic Communications (EC Directive) Regulations 2003, where we obtained your details in the course of a sale, or negotiations for a sale, of a similar service to you. We give you the chance to opt out when we collect your details, every marketing message we send carries an unsubscribe link, and you can opt out at any time without giving a reason.
We handle your data in line with data protection laws and follow recognised industry best practices, including appropriate technical and organisational measures to guard against unauthorised or unlawful processing, accidental loss, destruction or damage. We hold ISO 27001 and Cyber Essentials Plus certification, we restrict access to those who need it, we encrypt data in storage and in transit, and we train our staff.
While we will do our best to protect your personal information, we cannot guarantee the security of information transmitted over the internet.
We may share your personal data:
We never sell your information to anyone for marketing or any other commercial purpose. If our business were ever sold, your information would transfer with it and would stay protected on the same terms.
We will not transfer personal data relating to you to a country outside the UK and EEA unless the country or recipient is covered by an adequacy decision under Article 45 UK GDPR, appropriate safeguards are in place meeting the requirements of Article 46 (for example the International Data Transfer Agreement or Addendum), or one of the derogations under Article 49 applies. You can ask us for a copy of the safeguards we use by emailing dpo@doccla.com.
Unless the law requires us to keep it for longer, we will only hold your personal information within our systems for a period of 12 months since your last interaction with us.
Where we hold your data in connection with a contract between Doccla and your organisation, we retain it for the duration of that contract and for six years afterwards, to meet our legal and accounting obligations.
We use cookies to enhance website functionality and gather analytics. Please refer to our Cookie Policy for more information about the type of cookies used and how we use cookies and tracking technologies within our site. You can manage your preferences through the cookie banner at any time.
In certain circumstances, and provided that exemptions do not apply, you have the following rights over your personal information:
We will respond within one month. If your request is complex we may take up to two months longer; we will tell you within that first month if that happens, and why.
If you consider our use of your personal information to be unlawful, you have the right to complain to the Information Commissioner's Office at www.ico.org.uk. We would rather you came to us first, at dpo@doccla.com, so that we can put it right.
We do not make decisions about you by automated means alone, without a person involved.
We may amend this Privacy Notice from time to time, for example to keep it up to date, to make minor technical improvements or to comply with legal requirements. We will always publish the current version on our website, and the "last updated" reference tells you when we last changed it.
Last updated: October 2026
Version 1.0: October 2026