Supportal
Book a demo

Legal · Last Updated April 2026

Privacy Policy

Supportal Health Privacy Policy

We are Supportal Health Limited. We’re a company registered in England. In this privacy notice we will refer to ourselves as ‘we’, ‘us’ or ‘our’.

You can get hold of us by emailing info@supportal.health.

We take the privacy, including the security, of personal information we hold about you seriously. This privacy notice is designed to inform you about how we collect personal information about you and how we use that personal information. You should read this privacy notice carefully so that you know and can understand why and how we use the personal information we collect and hold about you.

We may update this privacy notice from time to time. This version was last updated on 10 April 2026.

Key Definitions

The key terms that we use throughout this privacy notice are defined below, for ease:

Data Controller: under UK data protection law, this is the organisation or person responsible for deciding how personal information is collected and stored and how it is used.

Data Processor: a Data Controller may appoint another organisation or person to carry out certain tasks in relation to the personal information on behalf of, and on the written instructions of, the Data Controller. (This might be the hosting of a site containing personal data, for example, or providing an email marketing service that facilitates mass distribution of marketing material to a Data Controller’s customer-base.)

Personal Information: in this privacy notice we refer to your personal data as ‘personal information’. ‘Personal information’ means any information from which a living individual can be identified. It does not apply to information which has been anonymised.

Sensitive Information: certain very sensitive personal information requires extra protection under data protection law. Sensitive data includes information relating to health, racial and ethnic origin, political opinions, religious and similar beliefs, trade union membership, sex life and sexual orientation and also includes genetic information and biometric information.

Our role in processing personal information

Supportal Health acts as a Data Controller in relation to the personal information processed through the Supportal Health platform.

Our platform is designed and operates as a standardised service, and we determine the core purposes and means of processing personal information, including how the platform functions, what data is collected, and how it is stored and secured.

Organisations (such as healthcare providers, charities, or patient support organisations) that use the Supportal Health platform to provide services to their users may also act as independent Data Controllers in relation to personal information processed within their programmes.

In particular, these organisations may determine:

  • which users are invited to participate in the platform;
  • how they engage with users through the platform; and
  • the content and purpose of any surveys, questionnaires, or feedback requests they create.

Where organisations create surveys or collect information through the platform, they are responsible for determining the purpose of that data collection and how the results are used within their services.

Supportal Health and the organisation may therefore act as independent Data Controllers in relation to the same personal information, each with their own responsibilities under applicable data protection laws.

Supportal Health may also process personal information to:

  • operate, maintain, and improve the platform;
  • analyse anonymised and aggregated data;
  • ensure platform security and safeguard users; and
  • manage our direct relationship with users and customers.

Details of personal information which we collect and hold about you

3.1 Set out below are the general categories and in each case the types of personal information which we collect, use and hold about you:

Identity Information

This is information relating to your identity such as your name, date of birth, location/address, profile picture, gender. Retention: We shall keep this data as long as it is relevant to our business unless you request for it to be deleted. We will delete the data after 5 years with no activity on your account.

Contact Information

This is information relating to your contact details such as email address. Retention: We shall keep this data as long as it is relevant to our business unless you request for it to be deleted. We will delete the data after 5 years with no activity on your account.

Account Information

This is information relating to your account with us (including username and password). Retention: We shall keep this data as long as it is relevant to our business unless you request for it to be deleted. We will delete the data after 5 years with no activity on your account.

Website, Device and Technical Information

This is information about your use of our website and technical data which we collect (including your IP address, the type of browser you are using and the version, the operating system you are using, details about the time zone and location settings on the device and other information we receive about your device). Retention: We shall keep this data as long as it is relevant to our business unless you request for it to be deleted. We will delete the data after 5 years with no activity on your account.

Survey and Feedback Information

This is information you provide when responding to surveys, questionnaires, or feedback forms within the Supportal platform. This may include health-related information, wellbeing data, demographic information, and free-text responses. Retention: We shall keep this data as long as it is relevant to our business or the organisation operating the Supportal service, unless you request deletion. We will delete the data after 5 years with no activity on your account, unless a longer retention period is required by the organisation operating the service.

Details of sensitive information which we collect and hold about you

4.1 Sensitive information is explained in section 1 above. We may collect and hold the following types of sensitive information about you, including information you choose to provide through surveys or feedback forms within the platform: (a) religion (b) health (c) ethnicity

4.2 Where we do hold the above sensitive information our retention periods are as follows:

Religious Beliefs

We store religious belief data of mentors so that patients can be matched with mentors of the same religion if that is important to them. We will retain this information with your consent and will remove this data 5 years after your account is deactivated.

Health Information

Health information such as the disease a patient or mentor have had is core to the Supportal Platform. We will retain this information with your consent and will remove this data 5 years after your account is deactivated.

Ethnicity Information

We store ethnicity data of mentors so that patients can find support from mentors of specific ethnicities if that is important to them. We will retain this information with your consent and will remove this data 5 years after your account is deactivated.

4.3 We do not collect information from you relating to criminal convictions or offences.

DISCLAIMER OF WARRANTY

TO THE EXTENT PERMITTED BY LAW, USE OF THIS WEBSITE IS AT YOUR SOLE RISK. ALL MATERIALS, INFORMATION, PRODUCTS, SOFTWARE, PROGRAMS, AND SERVICES ARE PROVIDED "AS IS," WITH NO WARRANTIES OR GUARANTEES WHATSOEVER. SUPPORTAL EXPRESSLY DISCLAIMS TO THE FULLEST EXTENT PERMITTED BY LAW ALL EXPRESS, IMPLIED, STATUTORY, AND OTHER WARRANTIES, GUARANTEES, OR REPRESENTATIONS, INCLUDING, WITHOUT LIMITATION, THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT OF PROPRIETARY AND INTELLECTUAL PROPERTY RIGHTS. WITHOUT LIMITATION, SUPPORTAL MAKES NO WARRANTY OR GUARANTEE THAT THIS WEBSITE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE.