Privacy Notice

Who we are

Tomorrow Cardiovascular Ltd (“Tomorrow”, “we”) runs this website and our clinics in Knutsford and Knowle. We are the controller of the personal information described here.

Registered in England and Wales, company number 03773485.
Registered office: Unit 7a, 29 Regent Street, Knutsford WA16 6GR.
Registered with the Care Quality Commission.
Information Commissioner’s Office registration number: Z4675088.

For anything about your personal information, email info@tomorrowwellness.com, call 0333 344 5970 or write to the address above.

What we collect

When you make an enquiry through a form on this site: your name, email address and phone number, the Health Check and clinic you are interested in, what prompted your enquiry, your message, whether you agreed to be contacted and to receive marketing, and the page and campaign you came from.

When you book an appointment: your name, email address, phone number and any note you add, the service, clinic and time you chose, and how and whether you have paid. Card payments are taken on Stripe’s secure page; we never see or store your full card number.

When you have a Health Check: your pre-screening questionnaire, the results of your tests and measurements, your consultation notes and your personal report. This is health information, which the law treats as special category data.

When you use this website: the essential information needed to run it securely. With your permission only, we also collect analytics and advertising information. See our cookie policy.

How we use it and why we are allowed to

To answer your enquiry and help you choose a Health Check: our legitimate interest in responding to people who contact us, or taking steps at your request before a contract.
To book, provide and follow up your Health Check: performing our contract with you. We use your health information for the provision of health care (UK GDPR Article 9(2)(h)), by or under the responsibility of health professionals bound by confidentiality.
To take payments and keep accounts: performing our contract and meeting our legal obligations, including tax law.
To send you news and offers: only if you opted in. You can unsubscribe at any time from any email, or by contacting us.
To measure and improve the website and our advertising: only with your consent through the cookie settings.
To meet our regulatory duties, including to the Care Quality Commission, and to deal with complaints and legal claims: legal obligation and legitimate interests.

We do not make decisions about you based solely on automated processing.

We never sell your information. We share it only where needed, with organisations that must protect it:

Stripe, which processes card payments.
Our website hosting, email delivery and clinic booking providers, which store and send information for us: DigitalOcean (website hosting, in London), Resend (email delivery) and Semble (clinic bookings and patient records).
Laboratories and specialists involved in your tests and their interpretation.
Your GP or another professional, only with your written authority.
Google and Meta for analytics and advertising measurement, only if you accept those cookies.
Regulators, law enforcement and professional advisers, where the law requires or allows it.

Some of these providers may process information outside the UK. Where they do, we rely on UK adequacy regulations or approved contract terms to protect it.

How long we keep it

Enquiries that do not lead to a booking: 2 years.
Booking and payment records: 6 years after the end of the financial year, for tax and accounting.
Clinical records: in line with the Records Management Code of Practice for health and social care.
Marketing preferences: until you unsubscribe, then only a record that you opted out.

Your rights

You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, to move it to another provider, and to withdraw consent at any time. Some rights do not apply in every case; for example, we must keep clinical and financial records for set periods.

To make a request, email or write to us. We may ask you to confirm your identity, and we will reply within one month. If someone is asking on your behalf, we will need your authority. There is normally no fee.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Keeping it safe

Our systems are encrypted, and staff can only see the information their role needs. Our website staff accounts use individual logins with role-based access.

Our services are for adults. This website is not intended for anyone under 18, and we do not knowingly collect information about children through it.

Changes to this notice

We will update this notice when how we use personal information changes. The date at the top shows when it last changed.