Logo Horizontal

Privacy policy

Vista Health Privacy Policy

Key Details

Last updated October 2026

This privacy policy describes how Vista Health protects and makes use of the information you give us when you use this website. This privacy policy applies to individuals who interact with us in a variety of ways, including as visitors to our website, users of our services, customers, suppliers or other stakeholders engaging with our organisation.

The term ‘Vista Health’, ‘us’, ‘our’ or ‘we’ refers to the owner of the website. The term ‘you’ refers to the user of our website.

Vista Health is part of InHealth Limited, a company registered in England and Wales under company number 05190234 with its registered office at Burnham Yard, London End, Beaconsfield, Buckinghamshire, England, HP9 2JH.

If you are asked to provide personal information when using this website, it will only be used in the ways described in this policy.

This policy is updated from time to time. The latest version is published on this page.


Introduction

When we collect, use and process personal data we are subject to the provisions of data protection legislation including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information we may collect from you

We may collect the following information:

  • Name and job title;
  • Contact information including email address, residential address and phone number;
  • Account login details;
  • Bank details;
  • Demographic information, such as postcode;
  • Website usage data;
  • Treatment notes and reports about your health and any treatment you have received;
  • Other relevant information relating to patient enquiries, including your client data that you upload in relation to your referral;
  • Your feedback and other information pertaining to surveys; and
  • Information regarding products or services added to your online basket or checkout, even if the transaction is not completed (Abandoned Cart Data).

When using or subscribing to our services, you may choose to provide us with sensitive information which is defined as “special category data” in the data protection legislation. Special category data includes information about your health, racial or ethnic origin, genetic and biometric data and sexual orientation. As with all the personal information which you provide to us, we shall use and store this information carefully in accordance with this policy.


How we collect this data

We may collect and process personal data when you engage with us, including:

·       When you use our website, including filling in forms and purchasing goods and services;

·       When you enquire or communicate with us about our services;

·       When you refer patients to us using the Vista Health Referrer Portal;

·       In the course of receiving services, such as providing information to our staff or responding to requests from staff during an appointment; and/or

·       If you respond to a request from us to a survey or send us feedback.

 

How we use this data

Why do we process your personal data?

What is our legal basis?

To provide our services to you, for example, to deliver one of our health assessments, carry out a scan, manage your enquiry, send you appointment reminders or manage your account with us.

 

If we have a contract directly with you, our legal basis is contractual necessity. If you access our services via a third party, such as your employer or a third-party referrer, our legal basis is legitimate interests because it is in our legitimate interest to deliver the services to fulfil our contract.

 

Where we process special category data, such as health-related or genetic data, for performing a contract with you for the delivery of our healthcare services, we rely on Article 9(2)(h) of the UK GDPR which permits processing where it is necessary for medical diagnosis, the provision of healthcare or treatment or the management of healthcare systems and services. This processing is carried out by, or under the responsibility of, a health professional or another person subject to a duty of confidentiality.

 

To send you marketing.

When you have actively consented to receive marketing, our legal basis is consent.

 

When you have purchased services from us and you have not chosen to opt-out from receiving marketing, our legal basis is legitimate interests.

 

To send you a customer survey, feedback form or request to take part in a video testimonial opportunity in relation to the service you have received and using the relevant feedback to improve our services.

 

Where we send you a request to complete a customer survey or feedback form and we use the relevant data to improve our services, our legal basis is legitimate interests because it is in our legitimate interest to understand our customer’s experience and identify any improvements required.

 

To understand how you interact with our website so that we can understand how our website is being used, how you use our services, keep our systems and information safe and improve our website.

 

Where we process personal data for these research purposes, our legal basis is consent through your chosen preferences on our cookie consent tool.

To investigate complaints, legal claims and data protection or clinical incidents.

To establish and defend legal rights.

Where we process personal data to handle and manage legal claims and complaints, our legal basis is legitimate interests.

 

Where the processing of personal data for this purpose involves special category data, we rely on Article 9(2)(f) of the UK GDPR which permits processing which is necessary for the establishment, exercise or defence of legal claims.

 

To comply with a legal obligation, regulatory requirements and related disclosures.

For activities relating to the prevention, detection and investigation of crime.

To verify your identity, make credit fraud prevention and anti-money laundering checks.

To handle and manage requests when you exercise your rights under applicable data protection laws.

 

Where the processing is necessary for us to comply with the law, our legal basis is legal obligation.

 


Marketing

We may wish to provide you with information about product updates, health insights, relevant services, personalised recommendations, special offers or any other updates which we think may be of interest to you.

If you have purchased services from us, we will use your contact details to send you information, via email, about product updates, health insights, relevant services, personalised recommendations, special offers and reminders related to the services you have purchased. You can opt-out of these communications at any time by contacting us or by clicking the unsubscribe button in any communication sent by us.

When you complete a form or otherwise provide your details to us on our website, you will see a tick box allowing you to opt-in to receive marketing communications from us by email, SMS or post.

If you consent to us providing you with marketing information, you have the right to opt-out at any time by one of the following methods:

  1. Send an email to marketing@vista-health.co.uk;
  2. Write to us at: Vista Health, Patient Referral Centre, Sandbrook House, Sandbrook Park, Rochdale, OL11 1RY; or
  3. Unsubscribe at any time by clicking the ‘unsubscribe’ button contained in any communication sent by us.

We will never lease, distribute or sell your personal data to third parties. Any information we have about you is stored and processed under our data protection policy, in line with data protection legislation.

 

Security


We are committed to ensuring that your information is secure. Your personal data is securely stored on locations which are strictly governed by our data security framework. This provides appropriate organisational and technical security measures to prevent unauthorised access or unlawful processing of your personal data and to prevent personal data being lost, destroyed or damaged.

Transferring data outside the UK
In some cases, we (or our data processors) may need to transfer data outside of the UK, for example to provide triage or reporting services, and to enable us to deliver services effectively for our patients. We only transfer data overseas:

  • to countries within the EEA (European Economic Area) that are subject to data protection rules equivalent to UK legislation;
  • to countries that have been assessed by the UK Government to provide an adequate level of protection for the processing of personal data; or
  • otherwise, if we have ensured that appropriate safeguards are in place to ensure that personal data is transferred securely and with equivalent protections to UK data protection standards.

 

For how long do we hold your personal data?

We hold your personal data in accordance with the InHealth Data Retention Policy, which is in line with nationally recognised retention periods for health records, or as long as is required by law.

We will only hold your personal data for so long as is necessary for the objectives and purposes contained in this privacy policy.

We will also retain your personal data where necessary for the establishment, exercise or defence of legal claims and to comply with our legal obligations.

Where you have provided consent for us to process your personal data, you have the right to withdraw your consent at any time by contacting us at marketing@vista-health.co.uk.

Use of cookies

How we use cookies is set out in our Vista Health Cookie Policy, which can be found here.

Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links, you should note that we do not have any control whatsoever over that other website. Therefore, we cannot be responsible for the content on those websites nor the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by our privacy policy. You should exercise extreme caution as to the content on those sites and look at the privacy statement applicable to the website in question.

Your Consent
By using our website, you consent to our Vista Health Terms and Conditions of Use, which can be found here.

What rights do you have?
Under data protection legislation, you have rights including:

Right of access: you have the right to ask us for copies of your personal data. This is called a “Subject Access Request”. Please send your request to data.protection@inhealthgroup.com.
Right to rectification: you have the right to ask us to rectify personal data you think is inaccurate or to complete information you think is incomplete.
Right to erasure: you have the right to ask us to erase your personal data in certain circumstances.
Right to restriction of processing: you have the right to ask us to restrict the processing of your personal data in certain circumstances.
Right to object to processing: you have the right to object to the processing of your personal data in certain circumstances.
Right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
Rights related to automated decision making including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal or significant effect on you unless the conditions and safeguards are met under data protection legislation.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

To ensure we are dealing with the right person, we may need to ask you to provide more information to verify your identity, for example, by reference to your driving licence, passport, and utility bill or similar showing your name and address.

How to exercise your data protection rights and contact us
If you wish to exercise any of your data protection rights, please send your request to data.protection@inhealthgroup.com


If you have any questions about this privacy policy or the personal data we hold about you or you wish to exercise any of your rights, please contact us on:

Name: Data Protection Officer
Address: Burnham Yard, London End, Beaconsfield, Buckinghamshire, HP9 2JH
Phone Number: 01494 560036
E-mail: data.protection@inhealthgroup.com

 

Lodging a complaint
If you have reason to complain about how your personal data has been controlled and/or processed by us, please contact us by email at: complaints@inhealthgroup.com.

We shall try to resolve your queries promptly and, if you remain unsatisfied, you have the right to contact the Information Commissioner’s Office at:

Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk

 

Vista Health Website Terms and Conditions of Use

Last updated October 2026

Welcome to our website.  By using this website, you are agreeing to comply with and be bound by the following Website Terms and Conditions of Use, which together with our Privacy Policy and Cookie Policy govern Vista Health’s relationship with you in relation to this website.   The term ‘Vista Health’, ‘us’, ‘our’ or ‘we’ refers to the owner of the website. The term ‘you’ refers to the user of our website.  Additional terms apply to use of the Vista Health Referrer Portal.

As a condition of your use of this website, you warrant to Vista Health that you will not use this website for any purpose that is unlawful or prohibited by these Website Terms and Conditions of Use.

This website contains material which is owned by or licensed to us. This material includes, but is not limited to, the design, layout, look, appearance and graphics, and any reproduction is prohibited.

The content of this website is for your general information and use only. We aim to update our website regularly, and may change the content at any time. Any of the material on our website may be out of date at any given time, and we are under no obligation to update such material.

The material displayed on our website is provided without any guarantees, conditions or warranties as to its accuracy. To the extent permitted by law, we hereby expressly exclude any liability for any direct, indirect or consequential loss or damage incurred by you or any user arising from or in connection with browsing our website, the materials and the downloading of them, or in connection with the use, inability to use, or results of the use of our website, any websites linked to it and any material posted on them, including, any liability for errors, inaccuracies, omissions or misleading or defamatory statements, and without limitation, any liability for loss of income or revenue, loss of business, loss of profits or contracts, loss of anticipated savings, loss of an opportunity, loss of data, loss of goodwill, wasted management or office time, and for any other loss or damage of any kind, however arising and whether statutory, caused by tort (including negligence), breach of contract, common law, or otherwise, even if foreseeable.

Nothing in these Website Terms and Conditions of Use shall affect our liability for death or personal injury arising from our negligence, nor our liability for fraudulent misrepresentation, nor any other liability which cannot be excluded or limited under the applicable law or which alternatively may affect your rights as a consumer (as applicable).

We do not represent or warrant that our websites or the materials are free of all viruses or other harmful components. You should therefore exercise caution in your use of the website and when downloading any materials and use up to date, industry recognised software to detect and destroy any viruses or similar destructive devices. You agree that you access our website and download the materials at your own risk and that you will be solely responsible for your use and any damage to any computer system, loss of data or other harm that may result.

We will not be liable for any loss or damage caused by a distributed denial-of-service attack, viruses or other technologically harmful material that may infect your computer equipment, computer programs, data or other proprietary material due to your use of our website or to your downloading of any material posted on it, or on any website linked to it.

We may revise these Website Terms and Conditions of Use at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we have made, as they are binding on you. Some of the provisions contained in these Website Terms and Conditions may also be superseded by provisions or notices published elsewhere on our website.

These Website Terms and Conditions of Use are governed by English law and the English courts will have exclusive jurisdiction over any claim arising from, or related to, a visit to or use of our website.

 

Additional Terms and Conditions of Use for users referring under Vista Health’s Referrer Portal

The term ‘Vista Health’, ‘us’, ‘our’ or ‘we’ refers to the owner of the Vista Health Referrer Portal. The term ‘you’ refers to you, the Referrer, and user of the Vista Health Referrer Portal.  

In these Additional Terms and Conditions of Use, the terms Personal Data, Data Controller, Personal Data Breach shall have the meanings given in the Data Protection Laws which shall mean all applicable laws relating to the processing, privacy and/or use of Personal Data, as applicable to either party or the services, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By completing and sending a referral via the Vista Health Referrer Portal accessed via https://www.vista-health.co.uk/referring-clinicians/onlineimaging, you are agreeing to comply with and be bound by the Website Terms and Conditions of Use (shown above) and any policies referred to therein and these Additional Terms and Conditions of Use.

On completion and submission of the online Clinical Referral Form via (https://www.vista-health.co.uk/referring-clinicians/onlineimaging) Vista Health will send an e-mail to acknowledge receipt of the referral.  This e-mail does not constitute acceptance of your referral; you acknowledge that your referral and all details contained therein will be subject to Vista Health’s verification process.  You accept that your Personal Data may be used and referenced by Vista Health when contacting any individual referred to in a referral.   

As a condition of your use of the Vista Health Referrer Portal, you warrant and represent to Vista Health that:

  • you are responsible for determining whether the individual in the referral requires the scan, or other procedure as detailed in the referral, by Vista Health; and
  • prior to sending the Clinical Referral Form to Vista Health, you will undertake to notify your clients that they will be referred to Vista Health for the referred services; and
  • you shall, for diagnostic purposes only, be solely responsible for determining what type of services is required by your client and in relation to which specific part(s) of your client’s body the services should capture; and
  • prior to completion and/or submission of a referral, you will obtain the consent, of your client for whom you have completed and/or submitted that referral, to make the referral which includes provision of their Personal Data, including sensitive personal data, to Vista Health; and
  • you will ensure that all data submitted within a referral is true and accurate to the best of your knowledge and belief; and
  • you will ensure that any GMC or HCPC number (as applicable) is correct and up to date; and
  • for the purposes of any relevant Data Protection Laws, you acknowledge that you are the Data Controller in relation to all Personal Data which you upload to the Vista Health Referrer Portal and submit as part of any referral and as such, are required to delete from your accounts Personal Data of your clients which you have uploaded in accordance with your suitable retention policy.  Please be aware, Vista Health reserves the right to also delete such Personal Data at periodic intervals from your account if you no longer deem it necessary to keep such data for the provisions of services by Vista Health; and
  • you will indemnify and keep indemnified Vista Health in respect of all losses, costs, claims and actions suffered or incurred by, awarded against or agreed to be paid by, Vista Health arising as a result of the sharing of the personal data via Vista Health’s Referrer Portal; and
  • you agree to implement and maintain, at your own cost and expense, appropriate security, technical and organisational measures to protect the Shared Data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access.  This shall include ensuring the safety, security and privacy of any login details required for access to the Vista Health Referrer Portal; and
  • you will undertake to notify any individual being referred that their details will be referred to Vista Health and that they should expect a representative from Vista Health to contact them in relation to its services by each or any of the communication routes you have indicated in your referral; and
  • you will not use the Vista Health Referrer Portal for any purpose that is unlawful or prohibited by the Website Terms and Conditions of Use, including these Additional Terms and Conditions of Use; and
  • you acknowledge that Vista Health reserves at its sole discretion the right to suspend or terminate any access to the Vista Health Referrer Portal; and
  • you acknowledge that access to the Vista Health Referrer Portal is not guaranteed.  

In using the Vista Health Referrer Portal you agree to comply with, and Vista Health in providing the services agrees to comply with, all Data Protection Laws in connection with the processing of the shared personal data (being the personal data of your clients shared between the parties for the purpose of Vista Health providing services (“Shared Data”)) and the exercise and performance of its respective rights and obligations under the terms and conditions of any agreement for services.  Neither you or Vista Health shall by any act or omission cause the other party (or any other person) to be in breach of any Data Protection Laws.

If a Personal Data Breach occurs in relation to the Shared Data, the party who has suffered the breach (being you or Vista Health) shall notify the other of the Personal Data Breach without undue delay, (but in no event later than twelve (12) hours after becoming aware of the Personal Data Breach).

You and Vista Health shall each comply with its obligation to report a Personal Data Breach to the Information Commissioner (or appropriate supervisory authority) and (where applicable) Data Subjects under Article 33 of the UK GDPR.

Changes and Governing Law

We may revise these Additional Terms and Conditions of Use at any time by amending this page. You are expected to check this page from time to time to take notice of any changes we have made, as they are binding on you. Some of the provisions contained in these Additional Terms and Conditions of Use may also be superseded by provisions or notices published elsewhere on the Referrer section of the Vista Health Website.

These Additional Terms and Conditions of Use are governed by English law and the English courts will have exclusive jurisdiction over any claim arising from, or related to, a visit to or use of our website.

 

Vista Health Website Cookie Policy

Last updated October 2026

This Cookie Policy relates to your use of our website. Our website, Vista Health, uses cookies on https://www.vista-health.co.uk/.

The term ‘Vista Health’, ‘us’, ‘our’ or ‘we’ refers to the owner of the website. The term ‘you’ refers to the user of our website.

Our website uses technology to collect information about its use, to distinguish between users, to help us provide you with a good experience,  allow us to improve the site and the service we offer and to market to you. This means that when you visit our website, cookies or similar technologies will be placed on your computer or other device.

Please make sure you read our Privacy Policy as well as this Cookie Policy.

What are cookies?

Cookies are small text files that are placed on your computer, smartphone or other device when you visit our website. A cookie file is stored on your device and allows us, or our third-party partners (see below) to recognise you and make your visit easier and more useful to you when you revisit our website.

How does Vista Health use cookies?

Cookies allow us to recognise users (where appropriate), tailor the content on our website to fit the needs of our website's visitors, help us improve the user experience by providing a better website and enables us to monitor which pages you find useful and which you do not. Without certain types of cookies enabled, we can't guarantee that the website, and your experience of it, are as we intended it to be.

The cookies we use include necessary, preference, statistic and marketing cookies in accordance with your preferences chosen within our cookie consent tool. You can find the full details of the cookies we use, including any third party cookies, in our cookie consent tool which can be found on the homepage of our website. You can review and manage your cookie preferences at any time by clicking the cookie settings widget in the bottom left corner of our website.

Most web browsers automatically accept strictly necessary cookies, but you can usually modify your browser settings to decline cookies if you prefer. However, this may prevent you from taking full advantage of the website.

We use cookies for the following purposes:

  • to obtain information about your visits and about the device you use to access our website;
  • to identify which pages are being used from the traffic log cookies. This helps us analyse data about web page traffic and improve our website to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system; and
  • to enable certain functions of the service, to provide analytics, to store your preferences, to enable advertisements delivery, including behavioural advertising.

This use automatically includes (where available), your Internet Protocol (IP) address and pseudonymous identifiers, software configuration, aggregate use information, geographical location data, operating system and browser type and, depending on the cookie, also includes the reporting of statistical data about our users’ browsing actions and patterns. We will not usually be able to identify you from this information.