Privacy Policy
Last updated: June 2026
Who we are
Travel Vaccines London operates from Kings Pharmacy, 6 Chester Court, Albany Street, London NW1 4BU (GPhC reg. 1040534). We are the data controller for the personal information you provide to us. You can contact us at hello@travelvaccineslondon.co.uk or on 020 7935 7172.
What information we collect
When you book an appointment or use our services, we may collect:
- Contact details — name, email address, phone number
- Date of birth
- Travel information — destination, travel dates
- Health information — allergies, current medications, medical conditions, pregnancy or breastfeeding status, previous vaccine reactions
- Vaccination records — vaccines administered, batch numbers, dates, clinician details
- Payment records — date and amount of payment (we do not store card details)
Health information is special category data under UK GDPR. We only collect and use it to provide your travel health consultation and vaccination services.
Why we collect it and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing travel health consultations and vaccinations | Contract; Art. 9(2)(h) UK GDPR (healthcare) |
| Maintaining clinical vaccination records | Legal obligation (GPhC standards) |
| Sending appointment reminders and follow-up | Legitimate interests |
| Improving our services | Legitimate interests |
How long we keep your information
Clinical records (including vaccination history) are kept for a minimum of 8 years from the date of your last appointment, in line with GPhC and NHS guidance. Contact information is retained for the same period, or until you ask us to remove it (where we have no legal obligation to retain it).
Who we share your information with
We do not sell or rent your data. We may share it with:
- Clinic staff — only those directly involved in your care
- NHS or public health bodies — where required by law (e.g. notifiable disease reporting)
- IT service providers — our booking platform (Supabase) stores data securely in the EU/UK. They act as data processors under a written agreement
Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate information
- Erasure — ask us to delete your data (where no legal obligation requires us to keep it)
- Portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, email hello@travelvaccineslondon.co.uk. We will respond within one month.
Cookies
We use essential cookies required for the website to function, plus analytics and performance cookies (Google Analytics, Microsoft Clarity, Vercel Insights) that help us understand how the site is used. See our Cookie Policy for details.
Complaints
If you have a concern about how we handle your data, please contact us first at hello@travelvaccineslondon.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last revised. Continued use of our services after a change constitutes acceptance of the updated policy.