![A guarded garden gate with transparent walls](https://viacara.com/img/content/gdpr-feature-light.webp)

# GDPR and Your Data

Your rights as a data subject and how to exercise them.

## Your data, your rights

ViaCara Ltd (company number 17138185) processes personal data under the UK General Data Protection Regulation (UK GDPR) and the [Data Protection Act 2018](https://www.legislation.gov.uk/ukpga/2018/12/contents). We are registered with the Information Commissioner's Office (ICO registration: ZC116531).

- **Registered office:** 66 Paul Street, London, EC2A 4NA, United Kingdom
- **Data protection contact:** [dataprotection@viacara.com](mailto:dataprotection@viacara.com)
- **EU representative:** we will appoint one under [EU GDPR Article 27](https://eur-lex.europa.eu/eli/reg/2016/679/art_27/oj) when we begin to actively serve clients in the EU or EEA, and publish the details in our [privacy policy](https://viacara.com/privacy/). Until then, EU and EEA residents can contact us at the data protection contact above.

## Where ViaCara operates

We offer ViaCara to people in the United Kingdom and the Channel Islands. We do not yet target the European Union or the European Economic Area.

If you use ViaCara from the EU or EEA, we process your personal data under UK GDPR. When we begin to actively serve the EU or EEA, we will also comply with the EU General Data Protection Regulation (EU GDPR, Regulation 2016/679).

The Channel Islands have their own data protection laws, which give you the same rights.

For full details on what we collect, how we use it, who processes it and how we use artificial intelligence, see our [privacy policy](https://viacara.com/privacy/).

## Your rights

Under the UK GDPR, you have the right to:

- **Access** your data: request a copy of everything we hold about you
- **Rectify** inaccurate data: ask us to correct anything that is wrong
- **Erase** your data: ask us to delete what we hold about you. A few records stay, such as the record of a booked session, and our [privacy policy](https://viacara.com/privacy/#data-retention) lists each one
- **Restrict** processing: ask us to stop using your data while you investigate a concern
- **Port** your data: receive your data in a machine-readable format
- **Object** to processing: tell us to stop processing your data for a specific purpose
- **Withdraw consent**: for health data processing, you can withdraw consent at any time

To exercise any of these rights, email the data protection contact above. We will respond within one calendar month.

## Where your data is stored

All core data is stored in the EU (Frankfurt, Germany). Our [privacy policy](https://viacara.com/privacy/) has the full details on processors, safeguards and international transfers.

Practitioner profile import is an optional onboarding feature where you supply URLs to your existing public listings and we pre-fill your profile via our EU-based language understanding sub-processor. Only the structured fields you review and edit are kept.

## Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the [Information Commissioner's Office](https://ico.org.uk/make-a-complaint/) (ICO). If you are resident in the Bailiwick of Guernsey, including Alderney and Sark, you may lodge a complaint with the [ODPA](https://www.odpa.gg/). If you are resident in Jersey, you may lodge a complaint with the [JOIC](https://jerseyoic.org/).

If you are resident in the EU or EEA, contact us at the data protection contact above.

**Last updated: September 2026**

**This page is written in plain language and is periodically reviewed for accuracy.**

*These legal disclosures reflect the UK data protection framework, including the UK General Data Protection Regulation, the [Data Protection Act 2018](https://www.legislation.gov.uk/ukpga/2018/12/contents) and the [Data (Use and Access) Act 2025](https://www.legislation.gov.uk/ukpga/2025/18/contents).*