Privacy notice
Last updated 29 August 2026
This notice explains what personal data Health Collider Ltd collects, why, who we share it with and what you can do about it. It covers this website, our client work, and the clinician community.
Who we are
Health Collider Ltd is the data controller. We are registered in Scotland, company number SC843699, and registered with the Information Commissioner's Office. Contact us about anything in this notice at contact@healthcollider.com.
We have not appointed a Data Protection Officer; we are not required to.
What we collect, and why
If you enquire or book a call
Your name, work email, company, what stage your product is at and what you tell us is blocking you. If you book through our scheduling page we also hold the meeting time and anything you write in the booking form.
Lawful basis: legitimate interests - responding to a business enquiry you initiated. Where you become a client, contract.
If you buy a session
Your name, email and billing details. We never see or store your card number - payment is taken by Stripe, who process card data as a controller in their own right.
Lawful basis: contract, and legal obligation for the accounting records we must keep.
If you join the clinician community
Your name, email, GMC number, grade, specialty and the types of work you want to hear about. We check your GMC number against the public register so we can tell companies the community is verified rather than self-declared. We hold this in a spreadsheet maintained for the community.
Lawful basis: consent, which you give when you apply and can withdraw at any time.
If you subscribe to The Collider Brief
Your email address, and nothing else.
Lawful basis: consent. Every email carries an unsubscribe link.
If we meet you
We use an AI note-taking tool to capture notes and transcripts of client and prospect meetings, so that what was agreed is recorded accurately. These notes contain what you said in the meeting. We use them to write up actions, keep an internal record of the relationship, and prepare for later conversations.
Lawful basis: legitimate interests - keeping an accurate record of a business conversation. If you would rather a meeting was not recorded, tell us and we will not record it. You can ask for a copy of, or the deletion of, the notes of any meeting you were in.
How we use AI
We use AI tools to help us draft correspondence, summarise meetings and prepare research on the companies we work with. That means some of the personal data above - business emails, meeting notes, company research - is processed by our AI provider acting as our processor under contract. We do not use your personal data to train AI models, and our provider does not train on it.
Decisions about your enquiry, your engagement and your membership of the community are made by people, not automatically by software.
Who we share it with
We do not sell your data. We use the following service providers, who process data on our instructions:
| Provider | What for | Where |
|---|---|---|
| Google (Workspace) | Email, calendar, documents | US, EU |
| FormSubmit | Delivering website form submissions to our inbox | US |
| Cal.com | Booking and scheduling | US |
| Stripe | Taking payments | US, EU |
| Atlassian (Trello) | Tracking client and lead relationships | US |
| Granola | Meeting notes and transcripts | US |
| Anthropic | AI processing of correspondence and meeting notes | US |
| Slack | Internal team discussion of client work | US |
| GitHub | Hosting this website | US |
We also share information with our accountants and, where we are required to, with HMRC or other authorities.
Sending data outside the UK
Most of the providers above are based in the United States. Where personal data leaves the UK we rely on the UK's adequacy regulations for the US where the provider is certified under the UK Extension to the EU-US Data Privacy Framework, and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply to a particular transfer.
How long we keep it
| What | How long |
|---|---|
| Enquiries that do not become clients | 24 months from our last contact with you |
| Client records and correspondence | Six years after the engagement ends, in line with our accounting obligations |
| Meeting notes and transcripts | 24 months from the date of the meeting |
| Clinician community records | Until you ask to leave the community |
| Newsletter subscription | Until you unsubscribe |
| Accounting records | Six years, as required by law |
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to someone else. You can object to processing we do on the basis of legitimate interests, and you can withdraw consent at any time where consent is the basis. Email contact@healthcollider.com and we will respond within one month.
If you are not satisfied with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first.
Cookies
This website sets no cookies and runs no advertising or analytics trackers. Our booking pages and payment pages are operated by Cal.com and Stripe and set their own cookies necessary to make a booking or take a payment; their own privacy notices apply once you are on those pages.
Changes
If we change how we use personal data we will update this notice and change the date at the top.