1. Who we are
Metovia is a private medical practice operated by Dr Anzal Qurbain MBBS BSc(Hons) MBA FFPM (GMC registration number 4369286). For the purposes of UK data protection law, Dr Anzal Qurbain is the data controller.
Contact: hello@metovia.co.uk
2. What data we collect
We collect the following categories of personal data:
- Identity data: name, date of birth, sex
- Contact data: email address, phone number, postal address
- Health data: medical history, symptoms, medications, test results, consultation notes, prescriptions
- Financial data: payment records (card details processed by our payment provider only)
- Technical data: IP address, browser type, pages visited
- Communications: enquiry messages and correspondence
3. Legal basis for processing
We process your personal data under the following UK GDPR bases:
- Contract: to provide the medical services you have requested
- Legal obligation: GMC, CQC and regulatory compliance
- Vital interests: emergency health situations
- Legitimate interests: operating and improving our service
- Consent: for marketing communications (withdrawable at any time)
For special category health data we rely on Article 9(2)(h) UK GDPR — processing necessary for the provision of health care.
4. How we use your data
- To provide medical consultations, diagnoses and treatment
- To issue prescriptions and referral letters
- To maintain your medical record
- To contact you about appointments and follow-up care
- To comply with GMC, CQC and regulatory requirements
- To process payments and respond to enquiries
5. Sharing your data
We do not sell your personal data. We may share data with your NHS GP (with consent), other specialists (if referred), laboratory services, pharmacy, regulatory bodies (where legally required), and IT/hosting providers under strict data processing agreements.
6. Data retention
Medical records are retained for a minimum of 8 years from last treatment for adults, or until age 25 for records created in childhood. Financial records are kept for 7 years. Enquiries not resulting in a consultation are deleted after 12 months.
7. Your rights
Under UK GDPR you have the right to access, correct, request erasure of, and port your personal data, and to object to processing. Contact us at hello@metovia.co.uk to exercise these rights. We will respond within one calendar month.
8. Complaints
You have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk | 0303 123 1113.
9. Cookies
Our website uses essential cookies for functionality only. We do not use advertising or tracking cookies without your consent.
Last updated: March 2026 | Version 1.0