Privacy Notice
Handover Integrations Limited · Last updated: 17 August 2026
Handover Integrations Limited (“Handover”, “we”) builds software that connects independent healthcare providers to NHS systems. We take privacy seriously — it is, quite literally, our line of work. This notice explains what personal data we handle, in which capacity, and your rights.
Handover Integrations Limited is registered in England & Wales (company no. 17373013), with the Information Commissioner’s Office under registration ZC210603. Registered office: 44 Leegate Road, Stockport, SK4 4AX.
The two roles we play
We handle personal data in two distinct capacities, and your rights work differently under each:
- As a data controller — for information about people who contact us, work with us, or do business with us. This notice governs that processing in full.
- As a data processor — for patient information we process on behalf of our client healthcare organisations. If you are a patient, please see the section below.
If you are a patient of one of our clients
Your healthcare provider is the data controller for your information. Handover processes patient data (such as referral details, demographic information and treatment activity used for NHS invoicing) strictly on your provider’s written instructions, under a data processing agreement, and only for the purposes of your care and its administration. We never use patient data for our own purposes, analytics or marketing. For information about how your data is used, or to exercise your rights over it, please contact your healthcare provider — their privacy notice is the one that applies. If you contact us directly about your patient data, we will pass your request to your provider within two working days and assist them in responding.
Information we collect as a controller
When you contact us
If you email us (for example at hello@handover.health), we collect your name, email address, organisation and the contents of your message. We use this to respond to you and to manage our business relationship. Lawful basis: our legitimate interests in responding to enquiries and developing our business.
When we work with you
For clients, suppliers and contractors we hold business contact details, contractual records and financial information needed to perform our contracts and meet legal obligations (for example tax and accounting law). Lawful bases: performance of a contract; legal obligation; legitimate interests.
On this website
This website does not use analytics, advertising or tracking cookies. Our web hosting provider records standard technical logs (such as IP addresses) for security purposes.
Who we share information with
We do not sell personal data. We share it only with service providers who support our business (such as email and document hosting, accountancy, and legal services), under appropriate contracts; with regulators or authorities where the law requires; and with professional advisers where necessary. Our suppliers process data in the UK or EEA, or under recognised safeguards.
How long we keep information
Correspondence and business records are kept only as long as needed for the purposes above — typically for the duration of our relationship plus statutory retention periods for contractual and financial records. Patient data processed on behalf of clients is retained only per the schedule in each client’s data processing agreement; the clinical record remains with the healthcare provider.
Your rights
You have the right to request access to your personal data, and to its rectification or erasure; to restrict or object to processing; and to data portability, where applicable. Where we act as a processor, we will route your request to the relevant healthcare provider (the controller) and assist them. To exercise any right, contact hello@handover.health (marked for the attention of our Data Protection Officer). We will respond within one calendar month.
You also have the right to complain to the Information Commissioner’s Office: ico.org.uk or 0303 123 1113.
National data opt-out
Handover is compliant with the national data opt-out policy. We process confidential patient information solely as a data processor for the purposes of individual care, on the instructions of the healthcare providers we serve. We do not use or disclose confidential patient information for planning or research purposes, so the national data opt-out does not currently require the removal of any records from our processing. We review this position annually and whenever our processing changes.
Changes to this notice
We will update this notice as our services develop — in particular when our platform enters live service — and the date at the top will always tell you when it last changed.