Our Corporate Structure
Run My Clinics Ltd is the legal entity and Data Controller for all personal and health data collected through the ARC brand.
We own the clinical infrastructure, employ all medical and administrative staff, and provide the secure technical systems used to manage your care.
Any reference to "we", "us", or "our" in this policy refers to Run My Clinics Ltd.
ICO Registration: Run My Clinics Ltd is registered with the Information Commissioner’s Office.
The Data We Collect
We collect, use, and store the following categories of data:
Identity Data
Name, date of birth, sex, and government-issued ID for identity verification.
Contact Data
Email address, telephone number, billing address, and delivery address.
Special Category Data
Blood test results, medical history, symptoms, and physiological biomarkers required for clinical assessment and treatment.
Marketing & Communications Data
Your preferences in receiving marketing communications and your communication history with us.
Technical & Usage Data
IP address, browser type, device information, and data about how you interact with our website.
How We Use Your Information
We only use your data when the law allows us to. We categorise usage as follows:
For Customers
To process your orders, conduct medical consultations, manage your treatment, and deliver services.
For Website Visitors
To improve platform functionality and ensure content is presented effectively for your device.
For Social Media Users
To engage with you on external platforms and measure the effectiveness of our communications.
Analytics and Service Improvement
Where your data is used for analysis, it will be fully anonymised in line with ICO guidance. We do not use identifiable personal or medical data in bulk analysis. Any aggregated data used for operational improvements is anonymised prior to processing.
Our Legal Basis for Processing
We rely on the following legal grounds under the UK GDPR:
Contractual Necessity
To fulfil the agreement we have with you to provide services.
Legal Obligation
Where we are required by law to maintain medical records or report certain information.
Legitimate Interests
For internal business improvements and service analysis, provided these do not override your rights.
Clinical Necessity
For the provision of healthcare or treatment by qualified health professionals.
Sharing Your Information
We do not sell your personal data. We only share information where necessary with:
Our Medical Team
Clinicians, prescribers, and pharmacists involved in your care.
Service Providers
Third parties providing IT systems, payment processing, logistics, and administrative support.
Regulatory Bodies
Where required by the Care Quality Commission, ICO, or other legal authorities.
All third parties are required to respect the security of your personal data and process it in accordance with applicable laws.
International Data Transfers
While we prioritise UK-based processing, some service providers may operate outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses or adequacy decisions, to maintain UK-level data protection standards.
Data Retention
We retain personal data only for as long as necessary. Medical records are stored in accordance with UK healthcare guidelines, typically between 8 and 20 years depending on treatment type, to ensure clinical continuity and legal compliance.
Your Legal Rights
Under data protection law, you have the right to:
- Request access to the information we hold about you
- Request correction of inaccurate or incomplete data
- Request erasure of your data, subject to legal medical record requirements
- Object to processing based on legitimate interests
- Request restriction of processing in certain circumstances
- Request transfer of your data where applicable
Cookies and Tracking
We use cookies to distinguish you from other users and improve site performance. Cookies help us understand how visitors interact with our website. You can control cookie preferences through your browser settings.
Security Measures
We implement appropriate technical and organisational security measures to protect your personal data. This includes encryption, secure servers, access controls, and role-based permissions.
Access to medical data is strictly limited to professionals who require it for your care.
External Links
Our website may contain links to third-party websites, including healthcare resources and educational content. We do not control these websites and recommend reviewing their privacy policies before providing any personal information.
Contact and Complaints
If you wish to exercise your rights or have any concerns about how your data is handled, please contact us:
Email: support@arctrt.co.uk
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
Version History
Version: 1.0
Last revised: 10 April 2026