DATA SECURITY
256-bit AES end-to-end encryption across all active consultations, clinical telemetry, and laboratory results at rest and in transit.
This Privacy Policy explains how GrabMedin collects, uses, stores, and protects your personal information when you use our website, clinical services, and digital platforms.
256-bit AES end-to-end encryption across all active consultations, clinical telemetry, and laboratory results at rest and in transit.
Complete patient autonomy to inspect, download in standardized FHIR formats, transfer, or permanently redact medical profiles anytime.
Strict prohibition against third-party ad profiling or telemetry monetization. Your health indicators are never sold or rented.
This Privacy Charter applies to all health solutions, teleconsultation tools, diagnostic laboratories, prescription logistics, and clinical applications managed by GrabMedin under its Domain/Subdomains
As a registered digital healthcare provider operating within the United Kingdom and collaborating internationally with accredited hospital systems, we uphold stringent compliance parameters across the General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and relevant portions of the Health Insurance Portability and Accountability Act (HIPAA) protocols for our international patient roster.
To provide safe, clinically valid diagnosis, monitoring, and therapeutic dispatch, we collect and categorize patient data under strict segregation models:
Legal name, date of birth, national insurance or government identification number, verified residential address, and emergency proxy contacts.
Symptom assessments, subjective consultations, physician clinical notes, differential diagnosis histories, and pharmacological contraindication checks.
Biomarker panels, blood assay readings, continuous glucose readings, diagnostic imagery (X-ray, MRI, ultrasound), and certified pathology reports.
Cryptographic session signatures, biometric login authentications, IP geolocation metadata, and clinician record inspection timestamps.
Medical information falls under Special Category Data according to Article 9 of the UK GDPR. We adhere strictly to the Caldicott Principles and federal HIPAA guidelines to ensure non-negotiable confidentiality:
Every data ingress point is overseen by an appointed Caldicott Guardian who monitors patient identifiability and necessity criteria.
Fast Healthcare Interoperability Resources (FHIR) framing for standardized, sandboxed, and clean record exchanges between NHS and private hubs.
Immutable append-only access journals documenting every clinician view, electronic prescription signature, and referral transfer.
Patient data is processed to support accurate diagnosis, treatment planning, monitoring, and clinically appropriate therapeutic decisions.
Relevant health information may be used to provide personalised healthcare services, recommendations, and treatment pathways.
Patient information may be securely exchanged with authorised healthcare professionals and trusted clinical partners where required for care.
We will never sell your personal information. Data sharing is limited to accredited operational partners under strict Data Processing Agreements (DPAs):
You hold statutory entitlements regarding your electronic health records. Exercise any of these rights directly through your GrabMedin portal dashboard or by reaching out to our DPO:
Receive a complete cryptographic export of all consultations, lab outputs, and communications within 30 days without fee.
Seamlessly transfer your health ledger to other healthcare practitioners in interoperable HL7/FHIR JSON structure.
Request deletion of account information. (Note: Statutory clinical records must be retained for clinical negligence timeframes as per NHS guidelines).
Correct inaccurate contact records, proxy contacts, or supplement incomplete subjective clinical histories immediately.
GrabMedin deploys multi-tiered defence architectures to guarantee that telemetry, teleconsultations, and electronic patient records remain uncompromised:
Patient data is encrypted during transmission and while securely stored across our infrastructure.
Security telemetry is continuously monitored to detect, investigate, and respond to potential threats.
If you have concerns about your patient data handling or wish to lodge a formal statutory request, reach our team
You also retain the right to lodge a complaint directly with the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe our data processing violates applicable legislation.
Review your privacy options or contact our Data Protection Officer.