Mayfair Laboratories Ltd (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your data when you use the WACure platform to communicate with NHS GP surgeries through WhatsApp.
We are a UK-based company and comply with the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
Last updated: 4 April 2025
WACure Privacy Policy
On this page
1. Introduction
2. About WACure
WACure is a healthcare messaging platform enabling patients to request and receive services such as appointments, prescriptions, referrals, and test results from GP surgeries via WhatsApp, using Meta’s WhatsApp Business Platform.
WACure does not send or receive medical advice. It only facilitates communication between patients and authorised healthcare providers.
3. Our Role with WhatsApp
WACure integrates with WhatsApp Business Platform, which is operated by WhatsApp LLC, part of the Meta Companies. WhatsApp handles messaging infrastructure and end-to-end encryption.
- Messages are end-to-end encrypted
- WACure cannot view the content of your messages
- WhatsApp temporarily stores undelivered encrypted messages for up to 30 days
To understand WhatsApp’s data handling, please read the WhatsApp Privacy Policy.
4. What Information We Collect
a. Directly from You:
- Name, date of birth, gender, mobile number
- NHS number (if applicable)
- Contact details of authorised proxies
- Messages and requests sent to surgeries via WhatsApp
- Appointment, referral, and prescription request details
b. Automatically from Devices:
- Device type, operating system, browser, IP address
- Connection status
- WhatsApp profile metadata
- Message delivery status
5. Lawful Basis for Processing
| Purpose | Lawful Basis |
|---|---|
| Providing messaging services | Contractual necessity (Art. 6(1)(b)) |
| Managing user accounts and consents | Legitimate interest (Art. 6(1)(f)) |
| Sharing data with GPs | Public task / Vital interest |
| Compliance with legal requests | Legal obligation (Art. 6(1)(c)) |
| Optional WhatsApp features | Consent (Art. 6(1)(a)) |
6. Use of Your Data
- Facilitate communication with your GP via WhatsApp
- Schedule appointments and process healthcare requests
- Notify you of messages, responses, and updates
- Enable proxy access where authorised
- Generate anonymised reports for NHS service improvement
7. Data Sharing
We only share your data with:
- GP practices, ICBs, NHS and NHS Digital, EMIS or SystmOne who already have access to them
- WhatsApp Business API (Meta) for secure messaging transport
- Authorised third parties who provide hosting, infrastructure, or support services
We do not share data with advertisers or sell personal information to third parties.
8. Data Storage and Security
- HTTPS encryption
- Role-based access control
- Secure NHS-compliant cloud storage
- Audit logs and access monitoring
9. Retention
Data is retained only as long as needed for the service or legal purposes. WhatsApp messages are removed after delivery or within 30 days.
10. Your Rights
You have the right to:
- Access your data
- Request corrections or deletion
- Withdraw consent
- Object to or restrict processing
- Lodge complaints with the ICO
📧 Email: dpo@wacure.com
11. Children and Proxies
Proxy access is supported for children or vulnerable adults. Direct use by under-13s is not permitted without proxy.
12. International Transfers
WhatsApp and Meta may process data outside the UK. Transfers are safeguarded using Standard Contractual Clauses or adequacy decisions.
13. Policy Updates
We may update this policy. Changes will be posted at: wacure.com/privacy-policy
14. Contact
📧 Email: support@wacure.com
📬 Post: MAYFAIR LABORATORIES LIMITED
Company number 12469779
Withington Works, Burton Road, Manchester, England, M20 3EB