Privacy notice
Last updated 19 September 2026
Who we are
Nelvo is run by R1 Tech sp. z o.o. · KRS 0001222088 · NIP 9452324941 · REGON 543913131 · ul. Józefa Chełmońskiego 142/8, 31-348 Kraków, Poland. For anything about your personal data, email privacy@nelvo.uk.
What this notice covers
This website, demo requests, and how we contact practices about Nelvo. It does not cover patient records kept in Nelvo: for those the clinic is the controller, and Nelvo processes the data only on the clinic's instructions under a data processing agreement. Patients should contact their clinic.
What we collect and why
• Demo requests: your name, work email, practice and message, to arrange the demo you asked for (legitimate interests, and steps you asked for before a contract). • Contacting practices: work contact details of practices and their staff from public sources such as practice websites and company registers, to tell them about Nelvo (legitimate interests). We email only where the law allows it: in the UK, incorporated companies; sole traders, partnerships and anyone in Ireland or Poland only with their consent. Every email has a simple way to opt out. • Customer accounts: names, work emails, sign-in and security records of clinic staff who use Nelvo, to provide the service under our contract with the clinic.
Cookies
We use only cookies that are strictly necessary: the sign-in session for staff and your language choice. There are no analytics or advertising cookies, so there is nothing to consent to.
Who else processes data
We use the service providers below. Each works under a written contract and only on our instructions. We do not sell personal data.
| Provider | What for | Where |
|---|---|---|
| Anthropic | Drafting clinical notes, GP letters and patient summaries from a consultation transcript, when a clinic uses AI drafting | USA |
| Deepgram | Turning consultation audio into text when a clinic records a consultation; the audio is not stored | EU |
| Twilio | SMS and WhatsApp appointment messages | USA |
| Resend | E-mail delivery | USA |
| Stripe | Card payments, through each clinic's own Stripe account | USA |
| Hosting and email providers | Servers, encrypted database and email delivery; named in our data processing agreement | UK or EEA |
Transfers outside the UK and EEA
Anthropic processes data in the United States. Those transfers rely on the EU Standard Contractual Clauses with the UK International Data Transfer Addendum, or on an adequacy decision where one applies. Speech-to-text runs in the EU.
How long we keep it
Demo requests and prospect records: until you ask us to stop, and no longer than 24 months after our last contact (we keep a short suppression entry so that we never contact you again). Customer account records: for the contract and six years after it ends, for tax and legal claims. Records of who opened patient records are kept for the clinic for eight years.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, restrict or object to how we use it, and receive it in a portable format. You can object to marketing at any time and we will stop. Write to privacy@nelvo.uk. You can also complain to the Information Commissioner's Office (ico.org.uk) or, in the EU, to your local data protection authority.
Changes
When the way we use personal data changes, we update this page and the date above.