PRIVACY POLICY

Last updated: 26/12/2025

This Privacy Policy explains how Dehlavi Limited (trading as PolicyEase) collects, uses and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Dehlavi Limited is a UK-based company providing policy personalisation services to GP practices and healthcare organisations.

For data protection purposes:

  • Client organisations are the Data Controllers

  • Dehlavi Limited acts as a Data Processor for service delivery

2. Personal Data We Collect

We may collect and process the following personal data:

From clients:

  • staff names and job titles

  • practice contact details

  • logos and branding

  • administrative login access (where required)

From website users:

  • name

  • email address

  • telephone number

  • enquiry or booking information

We do not collect patient data or special category data.

3. How We Use Personal Data

We use personal data to:

  • deliver contracted services;

  • communicate with clients and enquirers;

  • respond to enquiries and consultation requests;

  • manage invoicing and administration;

  • comply with legal obligations.

4. Legal Basis for Processing

Under UK GDPR, we process data on the following lawful bases:

  • Performance of a contract (for clients)

  • Legitimate interests (for enquiries and consultations)

  • Legal obligations (accounting and compliance)

5. Data Retention

  • Project documents and associated personal data are deleted 30 days after project completion.

  • Enquiry and consultation data is retained only as long as necessary for business purposes.

We do not retain data longer than required.

6. Data Sharing

We may share data only with:

  • secure document delivery platforms (e.g. OneDrive, Google Drive);

  • policy management systems where upload services are purchased;

  • professional advisers (accountants, insurers) where required by law.

We never sell personal data.

7. Data Security

We use appropriate technical and organisational measures to protect personal data, including secure storage, restricted access and confidentiality controls.

8. Your Rights

You have the right to:

  • request access to your personal data;

  • request correction or deletion;

  • object to processing in certain circumstances;

  • lodge a complaint with the Information Commissioner’s Office (ICO).

9. Contact

For data protection queries, contact:
Email: support@dehlavi.net