Privacy policy

Last updated: July 2026

Health Bunker is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently. This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who We Are

Health Bunker is the Data Controller for the personal information collected through our website and in connection with the healthcare services we provide.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us using the details on our Contact page.

What Information We Collect

Depending on how you interact with us, we may collect:

  • Your name, address, telephone number and email address.

  • Date of birth and identification details where required.

  • Medical history, treatment records and other health information relevant to your care.

  • Appointment and consultation records.

  • Payment and billing information.

  • Website usage information, including IP address, browser type, pages visited and cookies.

How We Collect Your Information

We collect information when you:

  • Complete a contact or enquiry form on our website.

  • Book an appointment or consultation.

  • Register as a patient.

  • Communicate with us by telephone, email or other electronic means.

  • Receive treatment or clinical services.

  • Browse our website through cookies and analytics technologies.

How We Use Your Information

We use your personal information to:

  • Provide safe and effective healthcare services.

  • Arrange appointments and communicate with you regarding your care.

  • Maintain accurate medical records.

  • Process payments and invoices.

  • Improve our services and website.

  • Meet our legal, regulatory and professional obligations.

  • Respond to enquiries and complaints.

Where you have given your consent, we may also send you information about our services or updates. You may withdraw your consent at any time.

Our Legal Basis for Processing

We process your personal information under one or more of the following lawful bases:

  • Your consent.

  • Performance of a contract to provide healthcare services.

  • Compliance with legal and regulatory obligations.

  • Legitimate interests in operating and improving our services.

  • Provision of healthcare and treatment, including processing of special category health data under Article 9 UK GDPR.

Sharing Your Information

We only share your personal information where necessary and appropriate, including with:

  • Healthcare professionals involved in your care.

  • Your GP (with your consent where appropriate).

  • Diagnostic laboratories and other clinical service providers.

  • Payment providers.

  • Regulatory authorities where required by law.

  • Trusted IT and website service providers who process information on our behalf under strict confidentiality agreements.

We never sell your personal information.

How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory and professional record retention requirements. Medical records are retained in accordance with current NHS and Department of Health guidance where applicable.

Keeping Your Information Secure

We use appropriate physical, technical and organisational security measures to protect your information against unauthorised access, loss, misuse or disclosure. These measures include secure IT systems, encrypted communications where appropriate, restricted staff access and regular security reviews.

Your Rights

Under UK GDPR you have the right to:

  • Access your personal information.

  • Request correction of inaccurate information.

  • Request erasure where applicable.

  • Restrict or object to certain processing.

  • Request transfer of your information where appropriate.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us using the details on our Contact page.

Cookies and Website Analytics

Our website uses cookies to improve your browsing experience and understand how visitors use our website.

Cookies may include:

  • Essential cookies required for the website to function.

  • Performance and analytics cookies to help us improve our website.

  • Functionality cookies that remember your preferences.

Where required, we will request your consent before placing non-essential cookies on your device.

Website Log Information

When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, operating system, referring website and pages visited. This information is used for website security, performance monitoring and anonymous statistical analysis.

Children's Privacy

Our website is not intended for children under the age of 13 without the involvement of a parent or guardian. We do not knowingly collect personal information directly from children through our website.

Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their own privacy policies.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology or our services. The latest version will always be available on this page.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal information, please contact Health Bunker using the details provided on our Contact page.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk.