Privacy Policy
We collect the minimum data we need to run the service. We never sell it. Here's exactly what we do and why.
Last updated: 1 June 2026 · GP Automate Ltd · Registered in England & Wales
Who we are
We are GP Automate Ltd (company number 13405991), registered at 116 Chaplin Road, 1st Floor, Wembley Centre For Health And Care, Wembley, England, HA0 4UZ.
We provide MHRA Class I clinical automation software for NHS GP practices, PCNs and ICBs — automating lab reporting, patient registrations and QOF prevalence coding so clinicians spend more time on patient care.
We are registered with the UK's data protection regulator, the Information Commissioner's Office (ICO), under registration number ZB326921.
Roles: Data Controller vs Data Processor
Healthcare organisations: When GP practices or PCNs use GP Automate to process patient information (such as lab reports or registrations), the healthcare provider is the Data Controller. GP Automate acts strictly as a Data Processor under a comprehensive Data Processing Agreement (DPA).
Direct interactions: When you browse our website, request a demo, or contact our team, GP Automate acts as the Data Controller for your contact information.
Sub-processors & Data Infrastructure
| Service | Role | Location |
|---|---|---|
| Microsoft Azure | Clinical processing infrastructure | UK |
| Microsoft 365 | Internal communications & storage | UK / EU |
| Fillout | Online demo & contact forms | EU |
| Plausible Analytics | Privacy-first cookieless analytics | EU |
Compliance evidence
For the underlying evidence behind our certifications — DSPT, DPIA, DCB0129, Cyber Essentials, penetration test reports and our Data Processing Agreement — visit the GP Automate Trust Centre.
Contact our Data Protection Officer
For any question or request regarding your personal data:
Umar Sabat (Data Protection Officer)
umar.sabat@ig-health.co.uk
116 Chaplin Road, 1st Floor, Wembley, HA0 4UZ