Privacy Policy

• We do not collect personal data from visitors.
• We do not store the postcodes you search — they are sent to postcodes.io only to compute distance, then forgotten.
• We use Umami and Vercel Web Analytics for cookieless, anonymised analytics. Vercel Analytics is disabled on /gp-letter so the contents of any Right-to-Choose letter you generate are never sent to our analytics provider.
• No cookies, no third-party tracking, no ad networks.
• If you use the GP-letter generator, the details you type are saved to your browser only (localStorage) and automatically cleared after 7 days — they never reach our servers.

When you search

• Postcode: sent to postcodes.io to look up latitude/longitude. Not stored on our servers.
• Search queries: the procedure + sort + distance params travel through the URL only. Not stored.

Analytics

We use Umami and Vercel Web Analytics to understand which pages get visited and which referrers send traffic. Both providers collect only aggregate, anonymised data:

• Page URL (without your search params)
• Referrer (which site you came from)
• Browser + OS (anonymised)
• Country (derived from IP, IP itself not stored)

Neither provider captures form-field values, keystrokes, session replay, or any DOM contents. No cookies are set. No tracking across other sites.

/gp-letter exclusion. Vercel Web Analytics is disabled on /gp-letter. The Right-to-Choose letter page is where you fill in personal details (full name, address, NHS number, GP details) before printing. We filter out every analytics event with a URL under /gp-letter client-side via the Vercel beforeSend hook before it leaves your browser, so even the page URL with its ?trust=&specialty= query string is never transmitted.

The GP-letter generator lets you draft a Right-to-Choose letter for your GP. So you can come back and finish it later — or hand it to a family member to review — your form entries are saved to your browser's localStorage, under the key hospitalwaits.gp-letter.v1.

What we save: the values you type into the form — name, date of birth, NHS number (optional), home address, postcode, GP name, GP practice name and postcode — plus a timestamp of when the save happened.

Where it lives: in your browser only, on the device you used. Nothing is sent to Doctor Data Ltd, Vercel, Supabase, or any third party. Other websites cannot read it.

How long we keep it: a maximum of 7 days from the most recent save. The next time you open the GP-letter page, anything older than 7 days is automatically deleted before the form is restored. You can also delete it instantly at any time with the “Clear saved details” button on the page, or by clearing site data for hospitalwaits.co.uk in your browser settings.

Why localStorage and not a cookie: localStorage is not sent to our servers with every request (cookies are), which keeps the data strictly client-side. It is not used for tracking, advertising, or analytics — only to remember the form for you.

From late 2026, HospitalWaits may carry sponsored placements from private hospital groups and affiliate links to private medical insurance comparison services. When this happens:

• Sponsored items will be clearly labelled with a "Sponsored" badge of at least equal visual weight to the listing.
• Outbound sponsored / affiliate links carry the rel="sponsored" attribute.
• If you click a sponsored or affiliate link and subsequently take an action with the partner, Doctor Data Ltd may receive a commission. We do not collect any personal data about you from these clicks; the partner's site has its own privacy policy.
• Sponsored placements do not influence our editorial analysis or methodology. See /sponsorship-policy for the full disclosure standard.

You have the right to:

• Access any data we hold about you (we hold none unless you've actively contacted us by email)
• Delete your data — email us
• Correct your data — email us
• Complain to the ICO if you're unhappy with how we handle your data

Doctor Data Ltd
Contact: mustafa@doctor-data.co.uk

This site does not use cookies. Umami analytics is cookieless by design. The GP-letter generator uses localStorage (not cookies) to remember your form entries on your own device — see the dedicated section above.