← Back to home

Privacy Notice

Last updated: 7 July 2026

This notice explains how Imaan Ltd ("we", "us") collects and uses personal data through WalkInClinics.uk. We aim to comply with the UK GDPR and the Data Protection Act 2018. The current public site lets people join the MenB priority list; it does not book appointments or take payment.

1. Who we are

Imaan Ltd is the data controller for personal data collected through WalkInClinics.uk.

  • Registered address: 2 Micklehead Business Village, St Michaels Road, St Helens, Merseyside WA9 4YU
  • Company number: 06415284
  • ICO registration number: ZA387968 (Tier 1, registered 29 May 2018)
  • Contact email: info@imaanhealthcare.com
  • Data Protection Officer: not appointed (not required for our processing).

2. Data we collect

  • MenB priority list details you submit: contact email, mobile number, postcode and your consent choice.
  • Information you choose to send us if you contact us, make a privacy request, or ask a support question.
  • Technical data: IP address, browser type, device, pages visited, referrer.
  • Cookies: see our cookies policy.

3. How we use your data and our lawful basis

  • To send you updates about the MenB programme and local pharmacy appointment information where you have joined the priority list, lawful basis: consent.
  • To share your details with participating pharmacies where you have consented and may be eligible, lawful basis: consent.
  • To keep the site secure and prevent fraud, lawful basis: legitimate interests.
  • To measure how the site is used, lawful basis: consent (via the cookie banner).
  • To meet legal obligations, lawful basis: legal obligation.

4. Who we share data with

For the MenB programme, where you have given consent, we share the minimum data needed (such as your email, mobile number and postcode area) with one or more GPhC-registered pharmacies near you so they can contact you about the MenB service. Those pharmacies are separate data controllers responsible for your clinical care, and their own privacy notices will apply once they contact you. You can withdraw this consent at any time.

We use service providers ("processors") who act only on our instructions:

  • Hosting and infrastructure: Hostinger (server hosting) and Supabase (database and authentication).
  • Text messages: The SMS Works Ltd (appointment confirmations and service messages by SMS).
  • Email delivery: Google (Google Workspace / Gmail, appointment confirmations and service messages by email).
  • Analytics: not currently used.
  • Payment processing: not applicable (we do not take payments).

We do not sell your personal data. We share data with regulators or law-enforcement only where required by law.

5. International transfers

Your data is processed in the UK, our database (Supabase) is hosted in London. If a processor ever stores or accesses data outside the UK, we rely on UK adequacy regulations or, where needed, the UK International Data Transfer Agreement (IDTA) / Addendum to the EU SCCs.

6. How long we keep data

  • MenB priority list (email, mobile number and postcode area): until you withdraw consent, or up to 24 months after the MenB programme ends, whichever is sooner.
  • Booking records: not currently collected on this public site.
  • Account data: not currently collected on this public site.
  • Support correspondence: up to 24 months.
  • Analytics: not currently collected (we use essential cookies only).

7. Your rights

Under the UK GDPR you have the right to:

  • Access a copy of your personal data.
  • Have inaccurate data corrected.
  • Have your data erased ("right to be forgotten").
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time (where we rely on consent).
  • Complain to the Information Commissioner's Office (ICO), ico.org.uk.

To exercise any of these rights use our privacy request form. We will respond within one month.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit and access controls. No online service can be guaranteed 100% secure.

9. Children

Our services are not directed at children under 13. Where a service is intended for older minors (e.g. the MenB university programme), we collect only the data needed for that purpose.

10. Changes to this notice

We will update the "Last updated" date above when this notice changes. Material changes will be highlighted on the homepage.