Home visits & in-clinic appointments · London & South East · Monday to Sunday, 9 AM – 7 PM
020 7101 4170
Legal

Privacy Policy

How we collect, use and protect your personal data.

Draft notice: this page sets out Hearizan's privacy practices in plain, good-faith language based on UK GDPR principles. It has not yet been reviewed by a solicitor or data-protection specialist and should be checked by one before being relied on as a final legal document.

Last updated: 24 September 2026

1. Who we are

Hearizan Ltd ("Hearizan", "we", "us") is the data controller for the personal information described in this policy. Our clinical headquarters is 167-169 Great Portland Street, West End, London W1, by appointment only. You can contact us about privacy matters at info@hearizan.co.uk.

2. What we collect

  • Contact details — name, email address, phone number, home address.
  • Booking details — appointment dates, chosen service, specialist, notes you provide.
  • Health data — hearing test results, audiograms, clinical notes, hearing aid history and fitting records. This is "special category" data under UK GDPR and gets extra protection.
  • Account data — login email and a securely hashed password if you create a patient portal account.
  • Payment-related data — where a hearing aid payment plan involves a card payment, card details are handled directly by our payment processor (Stripe); we do not store your full card number.
  • Technical data — standard web log data (IP address, browser type) needed to operate the site securely.

3. Why we use it, and our legal basis

  • To provide the hearing care service you book — performance of a contract, and for health data, provision of health care under UK GDPR Article 9(2)(h).
  • To contact you about your appointment, results or aftercare — performance of a contract / legitimate interest in running a safe, well-organised service.
  • To keep clinical records as required by professional and regulatory standards — legal obligation.
  • To respond to enquiries sent through the contact form — legitimate interest / your consent, given when you submit the form.
  • To send account, booking-confirmation and password-reset emails — performance of a contract.

We do not use your health data for marketing, and we do not sell personal data to third parties.

4. Who we share it with

Your data is shared only where needed to run the service: the audiologist or specialist assigned to your appointment, our booking and hosting infrastructure providers, our payment processor (Stripe) for any card payment, and our email provider for transactional emails. We require anyone processing data on our behalf to protect it to at least the same standard we do. We do not share your data with third parties for their own marketing.

5. How long we keep it

Clinical and health records are kept for the period recommended by relevant professional and regulatory guidance for audiology records, to support your ongoing care and in case they are needed for a future consultation. Account and booking data is kept for as long as your account is active, and account-only data is deleted or anonymised within a reasonable period after you ask us to close your account, unless we are legally required to keep it longer.

6. Your rights

Under UK GDPR, you have the right to:

  • Ask for a copy of the personal data we hold about you.
  • Ask us to correct inaccurate data.
  • Ask us to delete data we no longer have a lawful reason to keep.
  • Object to, or ask us to restrict, certain processing.
  • Ask for your data in a portable format, where applicable.
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email info@hearizan.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data properly.

7. Security

We use industry-standard measures — including encryption in transit, access controls and secure password storage — to protect your data. No online system is 100% secure, but we work to keep your information safe and only keep it as long as necessary.

8. Cookies

The site uses only the cookies needed for it to function, such as keeping you signed in to your patient portal. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time; the "last updated" date at the top will always reflect the latest version.