This notice tells you who we are and what to expect us to do with your personal information. It may change periodically and will be published on the Coherent Healthcare website.
We are Coherent Healthcare and we believe that profitability and exceptional patient care should go hand-in-hand. Efficient care is good care.
With decades of experience building healthcare technology and improving provider operations, we are uniquely placed to act as the choice commercial partner to those seeking to launch, run, and grow thriving practices. Our singular focus on healthcare means we understand your business inside and out.
Coherent Healthcare is the trading name of Coherent Healthcare Ltd, which is registered in the UK, company number 15067010.
Contact details
If you have any questions about how we use your personal information, contact us at: support@coherenthealthcare.com
Purpose: To provide services and goods
We collect or use: names and contact details, addresses, date of birth, payment details (including card or bank information for transfers and direct debits), account information, and identification documents.
Lawful basis: Contract. We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Purpose: Operation of customer accounts and guarantees
We collect or use: names and contact details, payment details, purchase history, account information (including registration details), information used for security purposes, and marketing preferences.
Lawful basis: Contract. We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Purpose: Service updates or marketing
We collect or use: names and contact details, marketing preferences, purchase or viewing history, and website and app user journey information.
Lawful basis: Legitimate interests. We are collecting or using your information because it benefits you, our organisation, or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability.
Our legitimate interest: personal data may be processed for marketing purposes based on our legitimate interest in providing information about our products, services, and special offers that are considered relevant to our clients, specifically business owners we have entered into contract with or who have indicated an interest in entering a partnership.
Purpose: Recruiting people to join our team
We collect or use: contact details (name, address, telephone number, personal email), date of birth, National Insurance number, copies of passports or other photo ID, employment history (including references and secondary employment), education history (including qualifications), and right to work information.
Lawful basis: Contract. We have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.
Which lawful basis we rely on may affect which rights apply to you. You can find out more about your data protection rights and the exemptions which may apply on the ICO's website.
Right of access
You have the right to ask us for copies of your personal information.
Right to rectification
You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
Right to erasure
You have the right to ask us to delete your personal information.
Right to restriction of processing
You have the right to ask us to limit how we can use your personal information.
Right to object to processing
You have the right to object to the processing of your personal data.
Right to data portability
You have the right to ask that we transfer the personal information you gave us to another organisation, or to you.
Right to withdraw consent
When we use consent as our lawful basis you have the right to withdraw your consent at any time.
To make a data protection rights request, please contact us at support@coherenthealthcare.com.
Customers & buyers
As long as necessary for the purpose of selling or providing our service, subject to your rights
Prospective customers & buyers
Up to 48 months after last contact with your organisation
Job applicants & prospects
24 months
We work with the following data processors to deliver our services. We may also share your data with other organisations where legally required to do so.
Adyen NV
Payment Services Provider: Adyen helps Coherent facilitate payment services for Customers.
Amazon Web Services (AWS)
Cloud Hosting Provider: AWS hosts Coherent's cloud infrastructure, including the servers that receive and store personal data.
Anthropic
AI Model Provider: Anthropic provides models that power Coherent's AI-assisted patient engagement features.
Twilio Inc.
Communications Provider: Twilio provides text and email communications services, used to send payment links, reminders and patient-engagement messages to the Customer's clients.
Meta Platforms Ireland LimitedEngaged only where enabled
Messaging & Enquiry Provider: Meta provides the WhatsApp Business Cloud API used to send and receive patient messages, and lead-capture from Meta platforms, where the Customer has enabled these channels.
Engaged only where the Customer authorises Coherent to engage patients on their behalf via WhatsApp, or where the Customer chooses to process new enquiries originating from Meta platforms.
Slack Technologies, LLC (a Salesforce company)
Internal Operations & Alerting: Slack is used for internal operational alerts to Coherent's team.
You have the right to lodge a complaint with us directly, or with the Information Commissioner's Office (ICO), the supervisory authority for data protection issues in England and Wales.
Coherent Healthcare Ltd is a UK-based company and our primary privacy framework is UK GDPR. Where we handle personal information of US residents through this website, we also observe the following:
Under the California Consumer Privacy Act as amended by the CPRA, you have the right to know what personal information we hold about you, the right to delete it, the right to correct it, the right to opt out of "sale" or "sharing" of personal information (we do not sell or share personal information in the CCPA sense), and the right to limit use of sensitive personal information. To exercise any of these rights, contact support@coherenthealthcare.com.
When we act as a Business Associate to a US Covered Entity, the handling of Protected Health Information is governed by the Business Associate Agreement we sign with that Covered Entity, and by the HIPAA Privacy and Security Rules. The privacy notice published by each individual Covered Entity applies to their patients — this notice covers only information collected directly through coherenthq.com.
Where we handle personal information of Canadian residents through this website, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.
You have the right to access the personal information we hold about you, to request corrections, and to withdraw consent to further processing (subject to legal or contractual restrictions). Requests should be sent to support@coherenthealthcare.com.
You have the right to lodge a complaint with us directly, or with the Office of the Privacy Commissioner of Canada.
Where Coherent handles personal health information on behalf of an Ontario health information custodian, the Personal Health Information Protection Act (PHIPA) applies. Our obligations in that context are governed by the agreement we sign with the custodian, and any complaint about PHI handling can be raised with the Information and Privacy Commissioner of Ontario.