Privacy & Data-Sharing Notice

This notice explains our practices in plain language and is written to align with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). It is provided for transparency and is not legal advice. We recommend a solicitor review before relying on it commercially.

Who we are

Solvable.Health is a neutral guide that helps people in UK private healthcare identify operational problems and connect with vetted providers who can help. "Solva" is the name of our AI assistant only.

The data controller is Solvable.Health Ltd, a company registered in England and Wales, company number 17279121. Our registered address is 59 Swaffham Road, Burwell, Cambridgeshire, CB25 0AN.

What we collect

• Quiz answers: your first name, last name, the care setting you work in, and how urgently you want to solve the problem.
• Your conversation with Solva: the messages you exchange while Solva qualifies your situation.
• Your email address: only if you choose to provide it so we can send your tailored report.
• The resulting report: the diagnosis, cost-of-inaction figure, and the provider recommendations generated for you.

How we use it

We use this information to identify your problem, generate your tailored report, and recommend the providers best placed to help. Our lawful basis is your consent, which you give when you start a conversation and again before any details are shared with a provider.

Sharing with providers

We never share your details with a provider automatically. Your information is only sent to a provider when you give explicit consent by using the "send this to [provider]" button on your report. At that point we share the relevant details from your quiz, conversation, and report so the provider can follow up. We confirm to you when your details have been sent.

The Solvable WhatsApp community

When you join, your number, name and the answers you give, such as your role, area and main challenge, are stored in Superchat, the WhatsApp Business platform Solvable uses. I use them to send you the weekly problem and relevant pages, and to reply to you. You can leave at any time by replying STOP. Messages are sent through WhatsApp, owned by Meta.

Solvable shares one problem a week on WhatsApp. Other members never see your number. I only use it to send you the weekly problem and reply when you message me. Reply STOP any time to leave. You can leave at any time in WhatsApp. WhatsApp's own privacy policy applies to your use of the app.

Submitting a problem

If you submit a problem, I store what you write, your role and, if you choose, your specialty and how long it has been going on. Please never include patient details. Submissions are kept privately in the Solvable admin area, which only I can access.

You must agree that I can use your problem, anonymously, in Solvable content. I review each one before anything is published and remove details that could identify you or anyone else. Your name and mobile number are never published.

Asking for a personal reply is optional. Only if you tick that box do I collect your name and mobile number, and I use them only to reply to you.

Healthcare companies (supplier form)

If you fill in the "For healthcare companies" form, I store your company name, website, your name, your role if given, your email address, your WhatsApp number if given, who you help, the problems you say you solve, your one-sentence description, an optional UK customer reference and any notes. I use these to review whether to list or introduce you, and to contact you about that. You must tick the consent box before sending. Please only name a customer reference if they are happy for you to.

Asking Paul a question or getting in touch

Where the site lets you ask me (Paul) a question or ask for a reply, I store what you write and the contact details you choose to give, and use them only to answer you. Contact details are optional unless you ask for a reply. I do not add you to any mailing list from this.

Who processes data for us

• Superchat: the WhatsApp Business platform. It holds your phone number, name, the group or list you are in and the messages we exchange.
• WhatsApp (Meta): carries the messages.
• Our hosting provider: runs the website and database where form submissions, conversations and reports are stored.
• Our AI provider: processes your messages to Solva to generate replies.

Retention

We keep leads and reports for as long as needed to operate the service and follow up on introductions, and no longer than necessary. You can ask us to delete your data at any time (see "Your rights"). We have not yet set fixed retention periods for each type of data; until we do, we review what we hold and delete what is no longer needed. We will publish specific periods here once they are agreed.

Your rights

• Access the personal data we hold about you.
• Correct inaccurate data or complete incomplete data.
• Withdraw consent and ask us to erase your data.
• Object to or restrict how we use your data.
• Lodge a complaint with the Information Commissioner's Office (ICO).

Please contact us first so we can try to put things right. If you are not happy with our answer you can complain to the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113.

Self-checks and message tools

Some guides include a short self-check and a tool that drafts a message for you to copy. When you finish a self-check or copy a message, we count scores, gaps and selected options in daily totals. We record these without names, contact details, IP addresses or tracking cookies. Anything you type into the message tool stays in your browser and is never sent to us. Nothing is sent to you or anyone else.

Where you came from

We count referral sources such as LinkedIn and WhatsApp in daily totals. We do not store a referral tag on your device or attach your browsing history to a submission.

Marketing, cookies and browser storage

We count visits anonymously on our own server. We don't use analytics cookies or tracking, and we can't identify you from these counts. We only see totals, like how many people viewed a page.

Used for features you choose (no consent needed):

• Steps you have marked as done and accordions you have opened, on this device.
• The care setting you pick and your last search on the home page, for this tab.
• Whether you have closed the Solva chat invite, for this tab.

These preferences are not identifiers and are never used for counting. Form security information prevents spam and duplicate submissions. The admin login cookie is only used for admin access. We respect Global Privacy Control and Do Not Track for counting. There are no unique-visitor estimates or analytics consent settings.

External links open separately. The other site's privacy policy applies when you visit it.

Free personal checks

Some problem pages offer a free personal check by Paul. You do not need an account or to sign in. When you ask for one we collect your answers, role, practice stage, first name and mobile number, plus any single document or link you choose to share.

We only message you on WhatsApp about your check because you tick the WhatsApp consent box. For a mystery patient check we only call or enquire once, within 7 days, because you tick the separate consent box, and we never book an appointment or take a clinic slot.

Uploads stay on your device until you send the request. Files are scanned when they arrive and unsafe or unsupported files are rejected. Please remove any patient names or details before uploading. Requests and files are kept in private storage that only the site admin can access after signing in, and are deleted 90 days after your check is marked as sent.

Opening the check form sets one essential security cookie that lasts no more than 24 hours. It only links your form to your request to stop abuse, and it is never used for analytics, tracking or marketing.

Contact

To exercise any of your rights or ask a question about this notice, contact the site owner using the contact details on this site or by post to our registered address above. We will respond within the timeframes required by UK GDPR.

This notice is pending a formal policy review and may change.