Renvia — coordinated cardio-renal-metabolic care

Legal

Privacy Policy

Last updated: September 2026

1. Who we are

Renvia ("we", "us", "our") provides a coordinated cardio-renal-metabolic remote monitoring platform for NHS trusts, private hospital groups and insurers in the United Kingdom. We are the data controller for personal data collected through our website and, where contracted, the data processor for patient data processed on behalf of a healthcare provider under a Data Processing Agreement.

2. Data we collect

  • Website visitors: name, email, organisation and message content submitted via contact or newsletter forms.
  • Platform users (clinicians, facility admins): name, work email, role, facility affiliation and authentication metadata.
  • Patients (via provider): demographic identifiers, clinical conditions and physiological readings (blood pressure, weight, heart rate, oxygen saturation, glucose) transmitted from paired home devices.
  • Technical: IP address, browser, essential cookies and error logs for security and reliability.

3. Lawful bases (UK GDPR)

We rely on: contract performance (service delivery), legitimate interests (product security and improvement), consent (marketing communications) and, for patient clinical data, Article 9(2)(h) provision of health care under a contract with the responsible healthcare provider.

4. How we store and protect data

All data is stored on UK/EU infrastructure, encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based and audit-logged. Renvia operates against DCB0129, DSP Toolkit and DTAC-aligned controls.

5. Sharing

We do not sell personal data. We share data only with sub-processors necessary to deliver the service (hosting, email, analytics), each under a written DPA. A current list is available on request.

6. Retention

Contact enquiries: 24 months. Newsletter: until you unsubscribe. Clinical data: as instructed by the responsible healthcare provider and applicable NHS records-retention schedules.

7. Your rights

You have the right to access, rectify, erase, restrict or port your personal data, and to object to processing. Requests: privacy@renvia.health. You may also complain to the Information Commissioner's Office (ico.org.uk).

8. Contact

Data protection queries: privacy@renvia.health