Privacy notice

Privacy Policy

This notice explains how NorthStar Medical Ltd handles information collected through the public website, eligibility test, service updates, and general enquiries. Patient portal and care services may have additional notices before they open.

Last updated 1 June 2026

Who we are

NorthStar Medical Ltd is responsible for the personal information collected through this public website. Contact: admin@northstar-medical.co.uk.

What we collect

  • Contact details you provide, such as name and email address.
  • Eligibility test answers you submit on the public website, limited to first admin checks such as age, UK location, broad condition area, previous treatment history, medical-record access, and previous clinic status.
  • General enquiry type and message content if you submit a form.
  • Consent preferences, including cookie choices and update opt-ins.
  • Technical records such as IP address, browser, device, security logs, and page performance data.

Public website forms are for service updates, eligibility follow-up, and general enquiries. Detailed health information, records, prescriptions, and patient documents should be kept for approved secure patient channels when services are available.

How we use it

  • To respond to enquiries, manage registration interest, and follow up on eligibility test requests.
  • To send updates where you have asked to receive them.
  • To keep the website secure, stable, accessible, and measurable.
  • To meet legal, regulatory, accounting, or governance duties where they apply.

The usual lawful bases are consent, legitimate interests, legal obligation, and, where relevant in future patient channels, healthcare-specific lawful bases that will be explained before those services open.

Sharing

We do not sell personal information. We may use trusted service providers for hosting, email, security, analytics, forms, records, or professional advice. Those providers should only process data under appropriate contracts and safeguards.

If future services involve clinicians, pharmacies, regulators, payment providers, or identity checks, the relevant patient notices and service terms should explain that processing before use.

Retention

  • Service update records are kept until you unsubscribe or the list is reviewed.
  • Eligibility test enquiries are normally kept for up to 12 months unless a longer period is needed for governance records.
  • General enquiries are normally kept for up to 12 months.
  • Security and hosting logs are kept only as long as needed for security and operation.
  • Legal or governance records may be kept longer where required.

Your rights

Under UK data protection law, you can ask to access, correct, delete, restrict, object to, or transfer your personal information. You can also withdraw consent where processing is based on consent.

Contact admin@northstar-medical.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.

Privacy controls