Suvera user privacy notice

Data that we process

If you need to understand how your health and identify data is processed, then you need to speak directly to your GP practice. We operate only on their instruction when providing our virtual clinic services.

When you use Suvera and create an account with us, we process usage data, such as when you open and close our software, what product features you use and what device you are using. This allows us to improve our software by better understanding your workflows, to provide you with usage data, to monitor the functioning of our software and to prevent fraud, cyberattacks and other dishonest behaviour.

Lawful basis for processing

We collect usage data, we ask for your consent via the cookie banner.

Retention period

This data is retained for a year, after which we either anonymise it or delete it from our systems. If you withdraw consent to capture this data then anything that can personally identify you is deleted. Anonymised data is not considered personal data so will not be deleted.

Data Sharing and transfers

Like most companies, we use a number of other companies as part of our data processing, for example cloud services and technology services. We have data processing agreements in place with these providers. Where data is transferred outside of the EEA, we ensure that appropriate protection and mechanisms are in place, for example standard contractual clauses. If data is transferred from the UK to the EEA then it is done so on the basis of those countries having a comparable data protection regime to the UK (adequacy). We do not sell your data to anybody.