Privacy Policy

1. Who We Are

South Wales Driver Medicals is a trading name of SAAH Limited, a company registered in England and Wales (company number 06772605). We provide DVLA-compliant driver medical examinations across South Wales and Bristol.

Data Controller: SAAH Limited
Email: info@swdrivermedicals.co.uk

2. What Data We Collect

When you use our website and booking system, we may collect the following personal data:

• Identity data: full name, date of birth
• Contact data: email address, telephone number
• Booking data: appointment date, time, location, and the type of medical service booked
• Payment data: payment card details (processed securely by Stripe; we do not store your full card number)
• Technical data: IP address, browser type, device information, and cookies when you visit our website

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your medical appointment bookings
• To communicate with you regarding your booking (confirmations, reminders, and updates)
• To process payments for our services
• To comply with legal and regulatory obligations
• To improve our website and services

4. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract: processing is necessary to fulfil your booking and provide our medical services
• Legal obligation: processing is necessary to comply with our legal and regulatory duties
• Legitimate interests: to improve our services and maintain the security of our website
• Consent: where you have given consent for marketing communications, which you may withdraw at any time

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Booking and appointment records are retained for a minimum of 8 years in accordance with medical record-keeping guidelines. Payment records are retained as required by financial regulations. You may request deletion of your data at any time, subject to our legal obligations.

6. Cookies

Our website uses cookies and similar technologies to ensure the site functions correctly and to improve your experience. These include:

• Essential cookies: required for the website to operate (e.g., session management)
• Analytics cookies: help us understand how visitors interact with our website so we can improve it

You can control cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the website.

7. Third-Party Services

We share your data with the following trusted third-party service providers, who process data on our behalf:

• Stripe: processes payments securely. Stripe's privacy policy can be found at stripe.com/gb/privacy
• Supabase: provides our database infrastructure for storing booking information securely

We do not sell your personal data to any third party. Data is only shared where necessary to deliver our services or where required by law.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure: request deletion of your personal data, subject to legal retention requirements
• Right to restrict processing: request that we limit how we use your data
• Right to data portability: request your data in a structured, commonly used format
• Right to object: object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at info@swdrivermedicals.co.uk. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data is transmitted over encrypted connections (HTTPS) and stored in secure, access-controlled systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

South Wales Driver Medicals (SAAH Limited)
Email: info@swdrivermedicals.co.uk
Company number: 06772605