Last updated: 13 February 2026
Emerald Privacy Notice
Emerald Privacy Notice
Emerald Privacy Notice
This Notice explains how Emerald Labs Ltd ("Emerald", "we", "us") collects, uses and protects your personal information when you use our preventive‑health Services. It is written in plain English so you can see exactly what happens to your data.
This Notice explains how Emerald Labs Ltd ("Emerald", "we", "us") collects, uses and protects your personal information when you use our preventive‑health Services. It is written in plain English so you can see exactly what happens to your data.
This Notice explains how Emerald Labs Ltd ("Emerald", "we", "us") collects, uses and protects your personal information when you use our preventive‑health Services. It is written in plain English so you can see exactly what happens to your data.
This Notice explains how Emerald Labs Ltd ("Emerald", "we", "us") collects, uses and protects your personal information when you use our preventive‑health Services. It is written in plain English so you can see exactly what happens to your data.
Key definitions
Term
Meaning
Term
Meaning
Term
Meaning
Term
Meaning
Term
Meaning
Platform
Emerald’s web portal at portal.withemerald.com and any related webpages, dashboards, software and APIs.
Platform
Emerald’s web portal at portal.withemerald.com and any related webpages, dashboards, software and APIs.
Platform
Emerald’s web portal at portal.withemerald.com and any related webpages, dashboards, software and APIs.
Platform
Emerald’s web portal at portal.withemerald.com and any related webpages, dashboards, software and APIs.
Platform
Emerald’s web portal at portal.withemerald.com and any related webpages, dashboards, software and APIs.
Member / You / Your
The natural person who purchases or is authorised to use a Membership.
Member / You / Your
The natural person who purchases or is authorised to use a Membership.
Member / You / Your
The natural person who purchases or is authorised to use a Membership.
Member / You / Your
The natural person who purchases or is authorised to use a Membership.
Member / You / Your
The natural person who purchases or is authorised to use a Membership.
Membership
The 12‑month subscription plan for the Services described in the Emerald Terms & Conditions.
Membership
The 12‑month subscription plan for the Services described in the Emerald Terms & Conditions.
Membership
The 12‑month subscription plan for the Services described in the Emerald Terms & Conditions.
Membership
The 12‑month subscription plan for the Services described in the Emerald Terms & Conditions.
Membership
The 12‑month subscription plan for the Services described in the Emerald Terms & Conditions.
Membership Year
The contiguous twelve‑month period commencing on the Member’s Start Date and each subsequent twelve‑month period thereafter.
Membership Year
The contiguous twelve‑month period commencing on the Member’s Start Date and each subsequent twelve‑month period thereafter.
Membership Year
The contiguous twelve‑month period commencing on the Member’s Start Date and each subsequent twelve‑month period thereafter.
Membership Year
The contiguous twelve‑month period commencing on the Member’s Start Date and each subsequent twelve‑month period thereafter.
Membership Year
The contiguous twelve‑month period commencing on the Member’s Start Date and each subsequent twelve‑month period thereafter.
Services
Collectively, the Screening, GP Companion, Digital Dashboard, Referral Letters and Marketplace Services plus any other features provided to Members.
Services
Collectively, the Screening, GP Companion, Digital Dashboard, Referral Letters and Marketplace Services plus any other features provided to Members.
Services
Collectively, the Screening, GP Companion, Digital Dashboard, Referral Letters and Marketplace Services plus any other features provided to Members.
Services
Collectively, the Screening, GP Companion, Digital Dashboard, Referral Letters and Marketplace Services plus any other features provided to Members.
Services
Collectively, the Screening, GP Companion, Digital Dashboard, Referral Letters and Marketplace Services plus any other features provided to Members.
Screening
A preventive appointment which may include venous blood and/or urine collection, anthropometric measurements, vital‑sign checks or other assessments at a Network Partner Site.
Screening
A preventive appointment which may include venous blood and/or urine collection, anthropometric measurements, vital‑sign checks or other assessments at a Network Partner Site.
Screening
A preventive appointment which may include venous blood and/or urine collection, anthropometric measurements, vital‑sign checks or other assessments at a Network Partner Site.
Screening
A preventive appointment which may include venous blood and/or urine collection, anthropometric measurements, vital‑sign checks or other assessments at a Network Partner Site.
Screening
A preventive appointment which may include venous blood and/or urine collection, anthropometric measurements, vital‑sign checks or other assessments at a Network Partner Site.
GP Companion
The asynchronous preventive-health messaging service (Chat) provided via the Platform.
GP Companion
The asynchronous preventive-health messaging service (Chat) provided via the Platform.
GP Companion
The asynchronous preventive-health messaging service (Chat) provided via the Platform.
GP Companion
The asynchronous preventive-health messaging service (Chat) provided via the Platform.
GP Companion
The asynchronous preventive-health messaging service (Chat) provided via the Platform.
GP Consultation
A remote clinical assessment (Video or Phone) with UK-licensed clinicians provided via the Platform.
GP Consultation
A remote clinical assessment (Video or Phone) with UK-licensed clinicians provided via the Platform.
GP Consultation
A remote clinical assessment (Video or Phone) with UK-licensed clinicians provided via the Platform.
GP Consultation
A remote clinical assessment (Video or Phone) with UK-licensed clinicians provided via the Platform.
GP Consultation
A remote clinical assessment (Video or Phone) with UK-licensed clinicians provided via the Platform.
Health Data
Special‑category personal data relating to your physical or mental health, including lab results, vital signs and wearable‑device metrics.
Health Data
Special‑category personal data relating to your physical or mental health, including lab results, vital signs and wearable‑device metrics.
Health Data
Special‑category personal data relating to your physical or mental health, including lab results, vital signs and wearable‑device metrics.
Health Data
Special‑category personal data relating to your physical or mental health, including lab results, vital signs and wearable‑device metrics.
Health Data
Special‑category personal data relating to your physical or mental health, including lab results, vital signs and wearable‑device metrics.
Member Content
Any data or content you upload or connect to the Platform (e.g. Health Data, Typeform answers, wearable feeds).
Member Content
Any data or content you upload or connect to the Platform (e.g. Health Data, Typeform answers, wearable feeds).
Member Content
Any data or content you upload or connect to the Platform (e.g. Health Data, Typeform answers, wearable feeds).
Member Content
Any data or content you upload or connect to the Platform (e.g. Health Data, Typeform answers, wearable feeds).
Member Content
Any data or content you upload or connect to the Platform (e.g. Health Data, Typeform answers, wearable feeds).
UK GDPR
The United Kingdom General Data Protection Regulation.
UK GDPR
The United Kingdom General Data Protection Regulation.
UK GDPR
The United Kingdom General Data Protection Regulation.
UK GDPR
The United Kingdom General Data Protection Regulation.
UK GDPR
The United Kingdom General Data Protection Regulation.
Who we are & how to contact us
Emerald Labs Ltd – 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
ICO registration: ZB701056.
CQC Provider ID: 1-23470666662.
For privacy questions, email care@withemerald.com.
Emerald Labs Ltd – 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
ICO registration: ZB701056.
For privacy questions, email privacy@withemerald.com.
Emerald Labs Ltd – 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
ICO registration: ZB701056.
For privacy questions, email privacy@withemerald.com.
Emerald Labs Ltd – 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
ICO registration: ZB701056.
CQC Provider ID: 1-23470666662.
For privacy questions, email care@withemerald.com.
Emerald Labs Ltd – 71‑75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
ICO registration: ZB701056.
For privacy questions, email privacy@withemerald.com.
What data we collect
Category
Examples
Source
Category
Examples
Source
Category
Examples
Source
Category
Examples
Source
Category
Examples
Source
Account data
Name, email, phone, DOB, address, payment status
You / Stripe
Account data
Name, email, phone, DOB, address, payment status
You / Stripe
Account data
Name, email, phone, DOB, address, payment status
You / Stripe
Account data
Name, email, phone, DOB, address, payment status
You / Stripe
Account data
Name, email, phone, DOB, address, payment status
You / Stripe
Screening data
Lab results, vitals, clinician notes
Network labs, clinicians
Screening data
Lab results, vitals, clinician notes
Network labs, clinicians
Screening data
Lab results, vitals, clinician notes
Network labs, clinicians
Screening data
Lab results, vitals, clinician notes
Network labs, clinicians
Screening data
Lab results, vitals, clinician notes
Network labs, clinicians
Consultation data
Text transcripts of video/phone consultations and chat logs. Note: we do not record the video or audio stream of consultations.
Automated transcription service, Clinicians
Consultation data
Text transcripts of video/phone consultations and chat logs. Note: we do not record the video or audio stream of consultations.
Automated transcription service, Clinicians
Consultation data
Text transcripts of video/phone consultations and chat logs. Note: we do not record the video or audio stream of consultations.
Automated transcription service, Clinicians
Consultation data
Text transcripts of video/phone consultations and chat logs. Note: we do not record the video or audio stream of consultations.
Automated transcription service, Clinicians
Consultation data
Text transcripts of video/phone consultations and chat logs. Note: we do not record the video or audio stream of consultations.
Automated transcription service, Clinicians
Treatment and Imaging
Prescription history, MRI reports
Network pharmacies, imaging partners, clinicians
Treatment and Imaging
Prescription history, MRI reports
Network pharmacies, imaging partners, clinicians
Treatment and Imaging
Prescription history, MRI reports
Network pharmacies, imaging partners, clinicians
Treatment and Imaging
Prescription history, MRI reports
Network pharmacies, imaging partners, clinicians
Treatment and Imaging
Prescription history, MRI reports
Network pharmacies, imaging partners, clinicians
Wearable data
Steps, heart rate, sleep stage, etc
Apple Health, Garmin, Oura, etc. (only if you connect)
Wearable data
Steps, heart rate, sleep stage, etc
Apple Health, Garmin, Oura, etc. (only if you connect)
Wearable data
Steps, heart rate, sleep stage, etc
Apple Health, Garmin, Oura, etc. (only if you connect)
Wearable data
Steps, heart rate, sleep stage, etc
Apple Health, Garmin, Oura, etc. (only if you connect)
Wearable data
Steps, heart rate, sleep stage, etc
Apple Health, Garmin, Oura, etc. (only if you connect)
Usage data
Page views, button clicks, error logs
Mixpanel, Google Analytics
Usage data
Page views, button clicks, error logs
Mixpanel, Google Analytics
Usage data
Page views, button clicks, error logs
Mixpanel, Google Analytics
Usage data
Page views, button clicks, error logs
Mixpanel, Google Analytics
Usage data
Page views, button clicks, error logs
Mixpanel, Google Analytics
Marketing data
Newsletter opens, UTM codes
Mailchimp, Google Analytics
Marketing data
Newsletter opens, UTM codes
Mailchimp, Google Analytics
Marketing data
Newsletter opens, UTM codes
Mailchimp, Google Analytics
Marketing data
Newsletter opens, UTM codes
Mailchimp, Google Analytics
Marketing data
Newsletter opens, UTM codes
Mailchimp, Google Analytics
Cookie data
Analytics & marketing cookies (only if you opt‑in)
Cookiebot + GA / Meta / LinkedIn pixels
Cookie data
Analytics & marketing cookies (only if you opt‑in)
Cookiebot + GA / Meta / LinkedIn pixels
Cookie data
Analytics & marketing cookies (only if you opt‑in)
Cookiebot + GA / Meta / LinkedIn pixels
Cookie data
Analytics & marketing cookies (only if you opt‑in)
Cookiebot + GA / Meta / LinkedIn pixels
Cookie data
Analytics & marketing cookies (only if you opt‑in)
Cookiebot + GA / Meta / LinkedIn pixels
We do not knowingly collect data from anyone under 18; the Platform blocks under‑18 sign‑ups.
We do not knowingly collect data from anyone under 18; the Platform blocks under‑18 sign‑ups.
We do not knowingly collect data from anyone under 18; the Platform blocks under‑18 sign‑ups.
We do not knowingly collect data from anyone under 18; the Platform blocks under‑18 sign‑ups.
We do not knowingly collect data from anyone under 18; the Platform blocks under‑18 sign‑ups.
Lawful bases for processing
Purpose
Lawful basis
Key notes
Purpose
Lawful basis
Key notes
Purpose
Lawful basis
Key notes
Purpose
Lawful basis
Key notes
Purpose
Lawful basis
Key notes
Create & manage your Membership
Contract (Article 6 (1)(b))
To deliver the Services you request.
Create & manage your Membership
Contract (Article 6 (1)(b))
To deliver the Services you request.
Create & manage your Membership
Contract (Article 6 (1)(b))
To deliver the Services you request.
Create & manage your Membership
Contract (Article 6 (1)(b))
To deliver the Services you request.
Create & manage your Membership
Contract (Article 6 (1)(b))
To deliver the Services you request.
Provide Clinical Care (Screenings, Consultations)
Provision of Health or Social Care (Art 9 (2)(h))
Necessary for medical diagnosis and the provision of health care treatment. This allows us to maintain a secure medical record.
Provide Clinical Care (Screenings, Consultations)
Provision of Health or Social Care (Art 9 (2)(h))
Necessary for medical diagnosis and the provision of health care treatment. This allows us to maintain a secure medical record.
Provide Clinical Care (Screenings, Consultations)
Provision of Health or Social Care (Art 9 (2)(h))
Necessary for medical diagnosis and the provision of health care treatment. This allows us to maintain a secure medical record.
Provide Clinical Care (Screenings, Consultations)
Provision of Health or Social Care (Art 9 (2)(h))
Necessary for medical diagnosis and the provision of health care treatment. This allows us to maintain a secure medical record.
Provide Clinical Care (Screenings, Consultations)
Provision of Health or Social Care (Art 9 (2)(h))
Necessary for medical diagnosis and the provision of health care treatment. This allows us to maintain a secure medical record.
Payment processing
Contract; legal obligation
Stripe stores limited card data.
Payment processing
Contract; legal obligation
Stripe stores limited card data.
Payment processing
Contract; legal obligation
Stripe stores limited card data.
Payment processing
Contract; legal obligation
Stripe stores limited card data.
Payment processing
Contract; legal obligation
Stripe stores limited card data.
Analytics
Legitimate Interests (Art 6 (1)(f))
We use de-identified or anonymised data to train our algorithms. You cannot be identified from the final training dataset.
Analytics
Legitimate Interests (Art 6 (1)(f))
We use de-identified or anonymised data to train our algorithms. You cannot be identified from the final training dataset.
Analytics
Legitimate Interests (Art 6 (1)(f))
We use de-identified or anonymised data to train our algorithms. You cannot be identified from the final training dataset.
Analytics
Legitimate Interests (Art 6 (1)(f))
We use de-identified or anonymised data to train our algorithms. You cannot be identified from the final training dataset.
Analytics
Legitimate Interests (Art 6 (1)(f))
We use de-identified or anonymised data to train our algorithms. You cannot be identified from the final training dataset.
Marketing emails
Soft opt-in under PECR
Unsubscribe anytime via footer link.
Marketing emails
Soft opt-in under PECR
Unsubscribe anytime via footer link.
Marketing emails
Soft opt-in under PECR
Unsubscribe anytime via footer link.
Marketing emails
Soft opt-in under PECR
Unsubscribe anytime via footer link.
Marketing emails
Soft opt-in under PECR
Unsubscribe anytime via footer link.
Optional ad pixels
Consent via Cookiebot banner
No cookies set until you opt‑in.
Optional ad pixels
Consent via Cookiebot banner
No cookies set until you opt‑in.
Optional ad pixels
Consent via Cookiebot banner
No cookies set until you opt‑in.
Optional ad pixels
Consent via Cookiebot banner
No cookies set until you opt‑in.
Optional ad pixels
Consent via Cookiebot banner
No cookies set until you opt‑in.
How we use Member Content
Service delivery. Provide dashboards, trend analysis and clinician advice.
Clinical Records. We transcribe consultations to create accurate medical notes for your safety and for clinical quality monitoring.
Improvement. Train internal algorithms on de‑identified aggregates.
Research. We may create anonymised statistics (e.g., “25 % of Members had low vitamin D”)—never identifying you.
Clinician access. Emerald clinicians view identifiable Health Data within our own EHR; no external telehealth processors.
Licence you grant us. When you upload or connect Member Content you grant Emerald a worldwide, royalty-free licence to host, use, modify and analyse that data, restricted to the purposes above.
We will not sell identifiable Health Data to third parties.
Service delivery. Provide dashboards, trend analysis and clinician advice.
Clinical Records. We transcribe consultations to create accurate medical notes for your safety and for clinical quality monitoring.
Improvement. Train internal algorithms on de‑identified aggregates.
Research. We may create anonymised statistics (e.g., “25 % of Members had low vitamin D”)—never identifying you.
Clinician access. Emerald clinicians view identifiable Health Data within our own EHR; no external telehealth processors.
Licence you grant us. When you upload or connect Member Content you grant Emerald a worldwide, royalty-free licence to host, use, modify and analyse that data, restricted to the purposes above.
We will not sell identifiable Health Data to third parties.
Service delivery. Provide dashboards, trend analysis and clinician advice.
Clinical Records. We transcribe consultations to create accurate medical notes for your safety and for clinical quality monitoring.
Improvement. Train internal algorithms on de‑identified aggregates.
Research. We may create anonymised statistics (e.g., “25 % of Members had low vitamin D”)—never identifying you.
Clinician access. Emerald clinicians view identifiable Health Data within our own EHR; no external telehealth processors.
Licence you grant us. When you upload or connect Member Content you grant Emerald a worldwide, royalty-free licence to host, use, modify and analyse that data, restricted to the purposes above.
We will not sell identifiable Health Data to third parties.
Service delivery. Provide dashboards, trend analysis and clinician advice.
Clinical Records. We transcribe consultations to create accurate medical notes for your safety and for clinical quality monitoring.
Improvement. Train internal algorithms on de‑identified aggregates.
Research. We may create anonymised statistics (e.g., “25 % of Members had low vitamin D”)—never identifying you.
Clinician access. Emerald clinicians view identifiable Health Data within our own EHR; no external telehealth processors.
Licence you grant us. When you upload or connect Member Content you grant Emerald a worldwide, royalty-free licence to host, use, modify and analyse that data, restricted to the purposes above.
We will not sell identifiable Health Data to third parties.
Sharing your data
Recipient
Reason
Safeguard
Recipient
Reason
Safeguard
Recipient
Reason
Safeguard
Recipient
Reason
Safeguard
Recipient
Reason
Safeguard
UKAS-accredited labs (e.g. Randox, TDL)
Process your samples
Contract + UK GDPR DPA
UKAS-accredited labs (e.g. Randox, TDL)
Process your samples
Contract + UK GDPR DPA
UKAS-accredited labs (e.g. Randox, TDL)
Process your samples
Contract + UK GDPR DPA
UKAS-accredited labs (e.g. Randox, TDL)
Process your samples
Contract + UK GDPR DPA
UKAS-accredited labs (e.g. Randox, TDL)
Process your samples
Contract + UK GDPR DPA
Partner General Pharmaceutical Council (GPhC) registered Pharmacies
Dispense and deliver medication/supplements
Contract + UK GDPR DPA
Partner General Pharmaceutical Council (GPhC) registered Pharmacies
Dispense and deliver medication/supplements
Contract + UK GDPR DPA
Partner General Pharmaceutical Council (GPhC) registered Pharmacies
Dispense and deliver medication/supplements
Contract + UK GDPR DPA
Partner General Pharmaceutical Council (GPhC) registered Pharmacies
Dispense and deliver medication/supplements
Contract + UK GDPR DPA
Partner General Pharmaceutical Council (GPhC) registered Pharmacies
Dispense and deliver medication/supplements
Contract + UK GDPR DPA
Imaging and Diagnostic Partners
Booking and processing scans (e.g. MRI)
Contract + UK GDPR DPA
Imaging and Diagnostic Partners
Booking and processing scans (e.g. MRI)
Contract + UK GDPR DPA
Imaging and Diagnostic Partners
Booking and processing scans (e.g. MRI)
Contract + UK GDPR DPA
Imaging and Diagnostic Partners
Booking and processing scans (e.g. MRI)
Contract + UK GDPR DPA
Imaging and Diagnostic Partners
Booking and processing scans (e.g. MRI)
Contract + UK GDPR DPA
Clinicians (employees and consultants)
Review results, issue advice
Employment / contractor NDA
Clinicians (employees and consultants)
Review results, issue advice
Employment / contractor NDA
Clinicians (employees and consultants)
Review results, issue advice
Employment / contractor NDA
Clinicians (employees and consultants)
Review results, issue advice
Employment / contractor NDA
Clinicians (employees and consultants)
Review results, issue advice
Employment / contractor NDA
Stripe
Card payments
Data stored in EU data centre
Stripe
Card payments
Data stored in EU data centre
Stripe
Card payments
Data stored in EU data centre
Stripe
Card payments
Data stored in EU data centre
Stripe
Card payments
Data stored in EU data centre
Google Cloud (UK) and similar infrastructure and hosting providers
Hosting & backups
Data stays in UK
Google Cloud (UK) and similar infrastructure and hosting providers
Hosting & backups
Data stays in UK
Google Cloud (UK) and similar infrastructure and hosting providers
Hosting & backups
Data stays in UK
Google Cloud (UK) and similar infrastructure and hosting providers
Hosting & backups
Data stays in UK
Google Cloud (UK) and similar infrastructure and hosting providers
Hosting & backups
Data stays in UK
Mailchimp and similar email marketing tools
Transactional/mktg email
EU SCCs in place
Mailchimp and similar email marketing tools
Transactional/mktg email
EU SCCs in place
Mailchimp and similar email marketing tools
Transactional/mktg email
EU SCCs in place
Mailchimp and similar email marketing tools
Transactional/mktg email
EU SCCs in place
Mailchimp and similar email marketing tools
Transactional/mktg email
EU SCCs in place
Mixpanel and similar analytics tools
Product analytics
Hosted in the UK
Mixpanel and similar analytics tools
Product analytics
Hosted in the UK
Mixpanel and similar analytics tools
Product analytics
Hosted in the UK
Mixpanel and similar analytics tools
Product analytics
Hosted in the UK
Mixpanel and similar analytics tools
Product analytics
Hosted in the UK
Regulatory authorities (CQC, ICO)
Legal or safety obligations
Only where required by law
Regulatory authorities (CQC, ICO)
Legal or safety obligations
Only where required by law
Regulatory authorities (CQC, ICO)
Legal or safety obligations
Only where required by law
Regulatory authorities (CQC, ICO)
Legal or safety obligations
Only where required by law
Regulatory authorities (CQC, ICO)
Legal or safety obligations
Only where required by law
Emerald never shares identifiable Health Data with employers; employer dashboards are aggregate only, and only if you use Emerald as part of Employer subscription.
Emerald never shares identifiable Health Data with employers; employer dashboards are aggregate only, and only if you use Emerald as part of Employer subscription.
Emerald never shares identifiable Health Data with employers; employer dashboards are aggregate only, and only if you use Emerald as part of Employer subscription.
International transfers
We host all health data in the United Kingdom. If we must transfer operational data outside the UK (e.g. to Mailchimp EU servers) we use UK Addendum-SCCs or an adequacy decision.
We host all health data in the United Kingdom. If we must transfer operational data outside the UK (e.g. to Mailchimp EU servers) we use UK Addendum-SCCs or an adequacy decision.
We host all health data in the United Kingdom. If we must transfer operational data outside the UK (e.g. to Mailchimp EU servers) we use UK Addendum-SCCs or an adequacy decision.
We host all health data in the United Kingdom. If we must transfer operational data outside the UK (e.g. to Mailchimp EU servers) we use UK Addendum-SCCs or an adequacy decision.
Cookies & trackers
We use Cookiebot to block non-essential cookies until you choose Accept.
Essential cookies (session, CSRF) load regardless. See our Cookie Banner link for a full list.
We use Cookiebot to block non-essential cookies until you choose Accept.
Essential cookies (session, CSRF) load regardless. See our Cookie Banner link for a full list.
We use Cookiebot to block non-essential cookies until you choose Accept.
Essential cookies (session, CSRF) load regardless. See our Cookie Banner link for a full list.
We use Cookiebot to block non-essential cookies until you choose Accept.
Essential cookies (session, CSRF) load regardless. See our Cookie Banner link for a full list.
Retention
Data set
Retention rule
Data set
Retention rule
Data set
Retention rule
Data set
Retention rule
Data set
Retention rule
Medical Records (Screenings, Transcripts, Notes)
10 years from Membership end (or longer if required by CQC/records management code of practice).
Medical Records (Screenings, Transcripts, Notes)
10 years from Membership end (or longer if required by CQC/records management code of practice).
Medical Records (Screenings, Transcripts, Notes)
10 years from Membership end (or longer if required by CQC/records management code of practice).
Medical Records (Screenings, Transcripts, Notes)
10 years from Membership end (or longer if required by CQC/records management code of practice).
Medical Records (Screenings, Transcripts, Notes)
10 years from Membership end (or longer if required by CQC/records management code of practice).
Analytics logs
18 months rolling window.
Analytics logs
18 months rolling window.
Analytics logs
18 months rolling window.
Analytics logs
18 months rolling window.
Analytics logs
18 months rolling window.
Marketing data
Until you opt‑out + 24 hrs to suppress.
Marketing data
Until you opt‑out + 24 hrs to suppress.
Marketing data
Until you opt‑out + 24 hrs to suppress.
Marketing data
Until you opt‑out + 24 hrs to suppress.
Marketing data
Until you opt‑out + 24 hrs to suppress.
Cookie consents
5 years.
Cookie consents
5 years.
Cookie consents
5 years.
Cookie consents
5 years.
Cookie consents
5 years.
Your rights
Under the UK GDPR you can: access, correct, restrict, object, port your data, or withdraw consent at any time.
Note on Erasure: Because we are a regulated healthcare provider, the "Right to Erasure" (Right to be Forgotten) does not apply to your core medical record (Screenings, Consultation Notes, Transcripts). We are legally required to retain these for safety and liability purposes.
Email care@withemerald.com. We respond within one month.
Under the UK GDPR you can: access, correct, restrict, object, port your data, or withdraw consent at any time.
Note on Erasure: Because we are a regulated healthcare provider, the "Right to Erasure" (Right to be Forgotten) does not apply to your core medical record (Screenings, Consultation Notes, Transcripts). We are legally required to retain these for safety and liability purposes.
Email care@withemerald.com. We respond within one month.
Under the UK GDPR you can: access, correct, restrict, object, port your data, or withdraw consent at any time.
Note on Erasure: Because we are a regulated healthcare provider, the "Right to Erasure" (Right to be Forgotten) does not apply to your core medical record (Screenings, Consultation Notes, Transcripts). We are legally required to retain these for safety and liability purposes.
Email care@withemerald.com. We respond within one month.
Under the UK GDPR you can: access, correct, restrict, object, port your data, or withdraw consent at any time.
Note on Erasure: Because we are a regulated healthcare provider, the "Right to Erasure" (Right to be Forgotten) does not apply to your core medical record (Screenings, Consultation Notes, Transcripts). We are legally required to retain these for safety and liability purposes.
Email care@withemerald.com. We respond within one month.
Security
We use TLS 1.3, AES-256 encryption at rest, MFA for staff accounts, regular penetration testing and role-based access controls. No system is 100% secure, but we work hard to protect your data.
We use TLS 1.3, AES-256 encryption at rest, MFA for staff accounts, regular penetration testing and role-based access controls. No system is 100% secure, but we work hard to protect your data.
We use TLS 1.3, AES-256 encryption at rest, MFA for staff accounts, regular penetration testing and role-based access controls. No system is 100% secure, but we work hard to protect your data.
We use TLS 1.3, AES-256 encryption at rest, MFA for staff accounts, regular penetration testing and role-based access controls. No system is 100% secure, but we work hard to protect your data.
Accessibility commitment
Emerald aims to meet WCAG 2.1 AA. If any feature is not accessible to you, please email us so we can help and fix the issue.
Emerald aims to meet WCAG 2.1 AA. If any feature is not accessible to you, please email us so we can help and fix the issue.
Emerald aims to meet WCAG 2.1 AA. If any feature is not accessible to you, please email us so we can help and fix the issue.
Emerald aims to meet WCAG 2.1 AA. If any feature is not accessible to you, please email us so we can help and fix the issue.
Changes to this Notice
We may update this Notice. Material changes will be emailed to Members 30 days before they take effect. Continued use after that date means you accept the changes.
We may update this Notice. Material changes will be emailed to Members 30 days before they take effect. Continued use after that date means you accept the changes.
We may update this Notice. Material changes will be emailed to Members 30 days before they take effect. Continued use after that date means you accept the changes.
We may update this Notice. Material changes will be emailed to Members 30 days before they take effect. Continued use after that date means you accept the changes.
Complaints
If you are unhappy with how we handle your data, contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
If you are unhappy with how we handle your data, contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
If you are unhappy with how we handle your data, contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
If you are unhappy with how we handle your data, contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Subscribe to our newsletter
Subscribe to our newsletter
Subscribe to our newsletter
Subscribe to our newsletter
Subscribe to our newsletter