How Aivelop collects, uses, stores and protects personal data — and your rights under UK GDPR.
Last updated: 1 July 2026This website and the Aivelop service are operated by Aivelop Ltd, a company registered in England and Wales (Company No. 17294831), with its registered office at 66 Paul Street, London, England, EC2A 4NA.
Data controller: Aivelop Ltd
66 Paul Street, London, England, EC2A 4NA
Registered in England & Wales · Company No. 17294831
Email: hello@aivelop.co.uk
Aivelop Ltd is the data controller for personal data collected through this website (aivelop.co.uk) and for personal data processed in the delivery of the Aivelop patient enquiry recovery service.
Where Aivelop processes personal data on behalf of a clinic (for example, patient name and contact details captured during an enquiry), the clinic is the data controller and Aivelop Ltd acts as a data processor. In those cases, the clinic's own privacy notice governs how that data is used.
When you contact us, request a demo, or enquire about the Aivelop service through this website or by email, we may collect:
We use this information to respond to your enquiry, prepare a demo, and communicate with you about the Aivelop service.
When a clinic uses the Aivelop service, the system may collect the following data from patients or members of the public who contact the clinic via WhatsApp or other supported channels:
| Data type | Purpose | Collected by |
|---|---|---|
| Full name | To identify the patient enquiry | Aivelop (on behalf of clinic) |
| Mobile number / WhatsApp ID | To respond to the enquiry and enable callback | Aivelop (on behalf of clinic) |
| Preferred location or branch | To route the enquiry to the correct team | Aivelop (on behalf of clinic) |
| Enquiry type (e.g. appointment, callback) | To capture and classify the request | Aivelop (on behalf of clinic) |
| Preferred date or time | To support scheduling by the clinic team | Aivelop (on behalf of clinic) |
| Message content | To route urgent, sensitive or clinical messages to staff | Aivelop (on behalf of clinic) |
Important: Aivelop does not collect or process clinical information, medical records, diagnoses, or treatment details. Messages containing clinical, urgent or sensitive content are flagged and passed to the clinic's human team without being stored by Aivelop's automated system.
When you visit aivelop.co.uk we may collect standard server log data including your IP address, browser type, pages visited and time of access. This is used for security and to understand how the site is used. See section 8 for information about cookies.
The Aivelop service uses the WhatsApp Business Platform (operated by Meta Platforms Ireland Limited) to send and receive messages on behalf of clinics. This means:
For patients: If you contacted a clinic via WhatsApp and received a message from an Aivelop-managed number, it was sent on behalf of that clinic. To ask the clinic to stop messaging you, contact them directly or reply STOP to any message you receive.
Meta may process data as an independent data controller in connection with WhatsApp and its business products. Aivelop is not responsible for Meta's independent data processing. For more information, see Meta's Privacy Policy.
Under UK GDPR, Aivelop relies on the following legal bases for processing personal data:
| Activity | Legal basis |
|---|---|
| Responding to clinic enquiries and demo requests | Legitimate interests (responding to business enquiries) |
| Delivering the Aivelop service to clinics | Contract (performance of a service agreement with the clinic) |
| Processing patient enquiry data on behalf of a clinic | Contract (data processing agreement with the clinic); the clinic holds its own legal basis under which it instructs Aivelop |
| Sending appointment reminders and follow-up messages via WhatsApp | Legitimate interests of the clinic (supporting patient appointment attendance); consent where required by applicable law |
| Website analytics and security logs | Legitimate interests (maintaining and securing the website) |
We do not sell personal data. We share data only as necessary to deliver the Aivelop service:
All sub-processors are required to handle personal data in accordance with UK GDPR and are bound by appropriate data processing agreements.
Patient enquiry data collected on behalf of a clinic is shared with that clinic as part of the service — this is the core purpose of the Aivelop workflow.
We may disclose data if required to do so by law, court order, or a regulatory authority.
| Data type | Retention period |
|---|---|
| Clinic contact and enquiry data | Up to 2 years from last contact, or until you ask us to delete it |
| Patient enquiry data processed on behalf of a clinic | As specified in the data processing agreement with the clinic (typically 90 days unless the clinic requests longer) |
| WhatsApp message logs | Up to 90 days, then deleted or anonymised |
| Website server logs | Up to 90 days |
When data is no longer needed, it is securely deleted or anonymised.
Aivelop aims to store and process personal data within the UK or European Economic Area (EEA). Where data is transferred outside the UK or EEA (for example, via a sub-processor with infrastructure in another country), we ensure appropriate safeguards are in place, including:
WhatsApp and Meta operate globally. For information on Meta's international data transfers, see Meta's Privacy Policy.
The aivelop.co.uk website is a static HTML site. It does not currently use tracking cookies, advertising cookies, or third-party analytics scripts.
If this changes, this policy will be updated and a cookie notice will be displayed on the site before any non-essential cookies are set.
Google Fonts are loaded from Google's servers when you visit this site. This may result in your IP address being transmitted to Google. For more information, see Google's Privacy Policy.
Under UK GDPR, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at hello@aivelop.co.uk. We will respond within one calendar month.
If you are a patient whose data was processed on behalf of a clinic, please contact the clinic directly in the first instance, as they are the data controller for that data.
Right to complain: If you have concerns about how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113
The Aivelop website and service are directed at healthcare businesses, not individuals under the age of 18. We do not knowingly collect personal data from children.
If a clinic uses Aivelop to handle enquiries that may involve children (for example, a paediatric clinic), the clinic is responsible for ensuring that appropriate consent or legal authority exists, and for ensuring that any such data is handled in accordance with their own safeguarding and data protection obligations.
We may update this privacy policy from time to time to reflect changes in our practices, the services we use, or applicable law. The date at the top of this page shows when it was last updated.
Material changes will be communicated to active clinic clients by email. We encourage you to review this page periodically.
If you have any questions about this privacy policy or how we handle your data, please contact us:
66 Paul Street, London, England, EC2A 4NA
Registered in England & Wales · Company No. 17294831
Email: hello@aivelop.co.uk
Website: aivelop.co.uk
For data subject requests, please include "Data Request" in the subject line. We will respond within one calendar month in accordance with UK GDPR Article 12.
