One item outstanding. The ICO registration reference is still to be added. Registering with the Information Commissioner's Office is a legal requirement for a controller processing health data.
This policy explains how Restora Clinic collects, uses and protects your information. It is written to meet the UK General Data Protection Regulation and the Data Protection Act 2018.
Who is responsible for your data
The data controller is RESTORA CLINIC LTD, trading as Restora Clinic, registered in England and Wales, company number 17404698. We are registered with the Information Commissioner's Office under reference [TO CONFIRM].
Correspondence address: 114 New Cavendish Street, London W1W 6XT
Email: contact@restoraclinic.com
WhatsApp: +44 7900 260740
What we collect
- Contact details. Your name, email address and telephone number.
- Health information. Your medical history, symptoms, medicines, family history and test results. This is special category data under Article 9.
- Appointment and correspondence records. What was discussed, agreed and planned.
- Booking and request details. Including the address and preferred dates you give us when you request a home blood draw.
- Messages you send us. Including anything you write to us on WhatsApp.
- Website information. Basic technical data such as pages visited, used to keep the site working.
Why we use it, and our lawful basis
- To provide your care. Article 6(1)(b), performance of a contract, and Article 9(2)(h), the provision of health care by a professional bound by a duty of confidentiality.
- To meet our legal and professional obligations. Article 6(1)(c), including record keeping duties.
- To reply to your enquiry. Article 6(1)(a), your consent, or Article 6(1)(f), our legitimate interest in answering you.
- To send you the emails you asked for. Article 6(1)(a), your consent, withdrawable at any time.
Third parties involved in your care
We work with third party companies and individual practitioners to provide and process parts of your care. This includes, and is not limited to:
- Blood testing, sample logistics and laboratory analysis
- Phlebotomists attending your home to take a sample
- Nutrition plans
- Exercise and movement plans
- Other lifestyle and health recommendations
Where a third party is involved in your care, who they are and exactly what will be shared with them is explained to you during your consultation, before anything is shared. Each of them acts on our written instructions or as a controller in their own right where the law requires it, and each is bound by confidentiality.
If you would rather something was not shared with a particular third party, tell us. In some cases that will mean a service cannot be provided, and we will say so plainly rather than proceeding.
If you message us on WhatsApp
WhatsApp is offered because it is convenient, and it is worth knowing how it works before you use it.
- WhatsApp is run by Meta, not by us. Message contents are end to end encrypted, so Meta cannot read them, but Meta does hold the fact that you messaged us, and when.
- Please use WhatsApp for practical things only, such as arranging or changing an appointment, or asking a general question. Please do not send symptoms, test results, photographs or any other health information over WhatsApp. If you need to tell us something clinical, we will move the conversation to your consultation or to secure email.
- If something you send us does need to go into your clinical record, we copy it across and it is then held under the same protections as the rest of your record.
- You can ask us to delete a WhatsApp conversation at any time.
If you would rather not use WhatsApp at all, email us instead. Nothing about your care depends on it.
The waiting list
If you join the waiting list we hold your name, email address and the area of interest you selected, and we use them only to tell you about Restora Clinic. We do not sell or share this list. Every email includes an unsubscribe link, and unsubscribing removes you.
Who else we share it with
Beyond the third parties above, we share your information only where it is necessary for your care or required by law. That includes a qualified prescriber reviewing a prescription, our scheduling provider, our messaging provider where you have chosen to message us, and our secure IT and email providers acting on our written instructions. We do not sell your data and we do not use it to train artificial intelligence systems.
Where your data is held
Your information is held in the United Kingdom or the European Economic Area wherever possible. Where a provider processes data elsewhere, we put an approved transfer mechanism in place.
How long we keep it
Clinical records are retained in line with professional record keeping requirements. Marketing contact details are kept until you unsubscribe or ask us to remove them.
Your rights
You have the right to be informed, to see a copy of your data, to have inaccurate data corrected, to ask for erasure where the law allows it, to restrict or object to processing, to data portability, and to withdraw consent at any time. Write to contact@restoraclinic.com and we will respond within one month.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This site uses only the cookies needed to make it work and to understand basic usage. It does not use advertising cookies.
Changes
If this policy changes we will update this page and change the date below.
Last updated 20 August 2026.