LSJ Rejuvenate logo

Privacy Policy

Last updated: March 2025

1. Who We Are

LSJ Rejuvenate ("we", "us", "our") is a clinically led weight management service operated by a qualified Nurse Consultant Prescriber. We are registered with the Care Quality Commission (CQC) and comply with the General Pharmaceutical Council (GPhC) standards for online prescribing services.

For data protection purposes, LSJ Rejuvenate is the Data Controller. If you have any questions about how we handle your personal data, please contact us at: [email protected]

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: full name, date of birth, gender
  • Contact data: email address, telephone number, postal address
  • Health data: medical history, current medications, weight, BMI, clinical assessment responses (this is special category data under UK GDPR)
  • Financial data: payment card details (processed securely via our payment provider — we do not store card numbers)
  • Technical data: IP address, browser type, pages visited, session duration (collected via analytics cookies with your consent)
  • Communications data: records of emails, messages, and consultation notes

3. How We Collect Your Data

We collect data through the following means:

  • Suitability questionnaire and consultation booking forms
  • Direct communications (email, telephone, online messaging)
  • Your patient portal account
  • Cookies and analytics tools (with your consent — see Section 8)

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

  • Contract performance: to deliver the weight management service you have engaged us for
  • Legal obligation: to comply with CQC, GPhC, and MHRA regulatory requirements, and to maintain clinical records as required by law
  • Legitimate interests: to operate and improve our service, prevent fraud, and ensure clinical safety
  • Consent: for marketing communications and non-essential analytics cookies (you may withdraw consent at any time)
  • Vital interests / health care provision: for processing special category health data necessary to provide safe clinical care

5. How We Use Your Data

Your personal data is used to:

  • Assess your suitability for our weight management programme
  • Conduct clinical consultations and issue prescriptions where appropriate
  • Manage your ongoing treatment and follow-up care
  • Process payments for our services
  • Send appointment reminders and service-related communications
  • Comply with our regulatory and legal obligations
  • Improve our website and service quality (with your consent)

6. Sharing Your Data

We do not sell your personal data. We may share it with:

  • Pharmacy partners: to fulfil prescriptions issued by our Nurse Consultant Prescriber
  • Payment processors: to handle secure payment transactions
  • IT and hosting providers: who process data on our behalf under strict data processing agreements
  • Regulatory bodies: CQC, GPhC, NMC, or law enforcement where legally required
  • Your GP: with your consent, we may share a summary of your treatment with your registered GP

All third-party processors are contractually bound to handle your data securely and only for the purposes we specify.

7. Data Retention

Clinical records are retained for a minimum of 8 years from the date of last treatment in accordance with NHS and professional regulatory guidance. Financial records are retained for 7 years as required by HMRC. Analytics data is retained for no longer than 26 months.

After the applicable retention period, your data is securely deleted or anonymised.

8. Cookies

We use the following categories of cookies on our website:

  • Essential cookies: required for the website to function correctly (e.g. session management, security). These cannot be disabled.
  • Analytics cookies: help us understand how visitors use our site so we can improve it. These are only set with your explicit consent.

You can manage your cookie preferences at any time by clicking the cookie banner when it appears, or by clearing your browser's local storage. Declining analytics cookies will not affect your ability to use our service.

9. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access: request a copy of the data we hold about you
  • Right to rectification: ask us to correct inaccurate data
  • Right to erasure: request deletion of your data (subject to legal retention obligations)
  • Right to restrict processing: ask us to limit how we use your data
  • Right to data portability: receive your data in a structured, machine-readable format
  • Right to object: object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (TLS/HTTPS), access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us:

LSJ Rejuvenate — Weight Loss Solutions
Email: [email protected]
Serving St Helens, Merseyside and the Barmouth area, Gwynedd