DocSelect, Privacy Policy

Last updated: 23 April 2026

Definitions

This Privacy Policy explains how Eligo Medical Services Ltd, trading as DocSelect (“DocSelect”, “we”, “our”, “us”), collects, uses, and protects your personal information when you use the DocSelect app, our website (docselect.co.uk), or any related services. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

DocSelect provides healthcare services through its mobile app, including GP consultations (in-person and remote), health management services, and appointment bookings. We are the data controller of the information collected and processed in relation to your use of our services.

2. Information We Collect

We may collect the following categories of data:

  • Personal details: Name, date of birth, address, email, phone number.
  • Health information: Medical history, consultation notes, prescriptions, diagnoses, treatment records.
  • Account information: Login credentials, payment history, subscription details.
  • Appointment details: Bookings, cancellations, clinician assigned, consultation type.
  • Pre-signup form data: Any information you provide when registering interest in upcoming services, such as our forthcoming GP Health Assessment waitlist.

3. How We Use Your Data

We process your personal and health data to:

  • Provide and manage healthcare services (appointments, consultations, treatment).
  • Communicate with you about your health, bookings, and membership.
  • Process payments for subscriptions and appointments.
  • Maintain accurate health records in line with legal and clinical obligations.
  • Improve and personalise our services.
  • Comply with legal and regulatory requirements (e.g., GMC/NHS standards).
  • Send you marketing communications about DocSelect services (only with your consent or where permitted by law).

4. Sharing Your Data

We may share your data with:

  • Clinicians providing healthcare services through DocSelect.
  • Third-party service providers, including IT systems, hosting, analytics, and payment processors.
  • Regulatory or legal authorities, if required by law.

5. Data Retention

We keep personal and health information only for as long as we need it to provide services, meet legal obligations, or resolve disputes. Indicative retention periods:

  • Medical records and consultation notes:at least 10 years after your last interaction with a DocSelect clinician, in line with UK medical record-keeping guidance. Paediatric records are retained until the patient’s 25th birthday, or 8 years after their last interaction, whichever is later.
  • Account details: retained while your account is active, then deleted within 6 months of account closure unless a longer legal hold applies.
  • Billing and payment records: retained for 6 years after the end of the relevant tax year, in line with HMRC requirements.
  • Marketing consents and preferences: retained until you withdraw consent or unsubscribe.
  • Support communications: retained for 2 years from the date of last contact.
  • Pre-signup form data: retained until the relevant service launches and you either complete signup or opt out, or for up to 24 months, whichever is sooner.

Once data is no longer required under any of the above, it is securely deleted or anonymised.

6. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights in relation to your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: ask us to correct inaccurate or incomplete information.
  • Right to erasure: ask us to delete your personal data, where the law allows. Some medical records must be retained for the periods set out in Section 5.
  • Right to restrict processing: ask us to pause processing of your data in specific circumstances.
  • Right to data portability: receive the personal data you provided to us in a structured, machine-readable format, or ask us to transfer it to another controller.
  • Right to object: object to processing based on our legitimate interests, or to direct marketing at any time.
  • Right to withdraw consent: where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.
  • Right not to be subject to automated decision-making: we do not make decisions about you using solely automated means that produce legal or similarly significant effects.
  • Right to complain to the ICO:if you are unhappy with how we handle your data, you can contact the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

To exercise any of these rights, email us at team@docselect.co.uk. We will respond within one month of receiving your request.

7. Data Security

We use strict security measures to protect your information, including:

  • Encrypted data storage and transfer.
  • Secure access controls and authentication.
  • Regular security testing and monitoring.

8. Cookies and Similar Technologies

Cookies are small text files that websites store on your device to remember preferences, keep you signed in, measure how the site is used, or embed third-party content. Similar technologies include local storage and pixels. This section explains what DocSelect uses today.

8.1 Consent

When you first visit the site, our consent banner (CookieYes) asks whether you accept non-essential cookies. Non-essential cookies do not load until you accept. You can change your choice at any time via the consent preferences link in the banner.

8.2 Strictly necessary

A small consent cookie from CookieYes remembers your choice so we don’t ask on every page. This is always set and is exempt from consent under UK PECR.

8.3 Analytics and advertising (subject to your consent)

  • Google Tag Manager: loads and manages the tags below.
  • Google Analytics 4: measures page views, events, and user journeys so we can improve the site.
  • Google Ads conversion tracking: measures how many visitors who arrived from a Google Ad go on to book a consultation, so we can spend advertising budget responsibly.

We also preserve certain marketing parameters (for example gclid, utm_source, utm_campaign) in your browser’s local storage for the duration of your visit, so that if you go on to book a consultation we can attribute the referral correctly. These parameters are never sold or shared beyond our own analytics.

8.4 Third-party embeds

  • Trustpilot (review widget): loaded on pages that display the Trustpilot score. Trustpilot may set cookies to deliver the widget and attribute review impressions. See Trustpilot’s privacy terms.
  • Mux (video player): if you open a doctor introduction video, Mux may set analytics storage on your device to measure playback quality and performance. See Mux’s privacy policy.

8.5 Managing cookies

You can change your consent at any time via the CookieYes preferences link. You can also control and delete cookies through your browser settings, block third-party cookies, or clear existing cookies. Blocking third-party cookies may affect the functionality of the Trustpilot widget and Mux video player.

9. Termination and Data Deletion

If you terminate your account, we may retain certain personal and health data as required by law (e.g., medical record-keeping obligations). Other data will be deleted in accordance with our retention policy.

10. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us: