Privacy Policy
Beyond by Evolve Privacy Notice
Operated by Evolve GLP-1
Last updated: 23/06/2026
This privacy notice explains how Evolve GLP-1 (“we”, “us”, “our”) collects, uses and protects your personal information when you use Beyond by Evolve, our website, and related support services.
Beyond by Evolve is a patient support app designed to provide guidance, education and support for people using, tapering off, or stopping GLP-1 medications, as well as those seeking support with maintaining weight loss after treatment. We do not prescribe medication through the app itself.
1. Who we are
Evolve GLP-1 is a healthcare advisory service operated by an independent prescribing pharmacist.
For the purposes of UK data protection law, Evolve GLP-1 is the data controller of your personal information.
Contact details
Email: info@evolveglp.co.uk
2. What information we collect
We may collect and use the following types of personal information.
Personal information
-
name
-
address
-
email address and telephone number
-
date of birth
-
gender
-
account registration details
-
payment information, where applicable
-
records of communications with us, including messages, emails, calls and consultations
-
information you provide when contacting us for support or advice
Health and care information
-
medical history and current health conditions
-
current and previous medications
-
allergies
-
side effects and symptoms you tell us about
-
weight-related information
-
lifestyle information relevant to your support, such as diet, routine, cravings, exercise and wellbeing information
-
information you provide in health questionnaires, check-ins, consultations or support forms
-
information relating to your progress, goals and weight-management journey where relevant to the support we provide
App and website usage data
-
account activity and preferences
-
technical information such as IP address, browser type, device type, operating system and app version
-
usage information about how you interact with our app, website or features
-
diagnostic, performance and analytics information used to improve the service
Marketing data
-
your marketing and communication preferences
-
records of consent or opt-out preferences for marketing communications
3. How we use your information
We use your personal information to:
-
provide personalised health-related guidance, education and support
-
manage your account and app functionality
-
communicate with you about your account, support, enquiries or service updates
-
review information you submit through the app, including check-ins, forms and messages
-
process payments where applicable
-
improve our services, app functionality and user experience
-
monitor usage, troubleshoot issues and maintain security
-
send marketing communications where you have chosen to receive them
-
comply with legal, regulatory, safeguarding and professional obligations
-
maintain appropriate healthcare-related records where required
4. Our lawful bases for processing
We process your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
To provide our services and manage your account
We rely on:
-
Contract – where processing is necessary to provide the services you have requested, manage your account, communicate with you, and deliver app functionality
-
Legitimate interests – where processing is necessary to operate, improve, secure and administer our website, app and services, including troubleshooting, analytics, fraud prevention and service development
For health and care information (special category data)
We rely on:
-
Article 9(2)(h) UK GDPR – processing is necessary for the provision of health or social care, treatment, health advice, or the management of health or social care systems and services
-
Article 6(1)(e) and/or 6(1)(f) where relevant for associated processing required to provide and manage those services
-
Explicit consent, where appropriate or where consent is otherwise required for a particular use of your data
For marketing
We rely on:
-
Consent – for email and SMS marketing communications where required by law
You can withdraw your consent to marketing at any time.
To comply with legal and regulatory obligations
We may also process personal information where necessary to comply with legal obligations, safeguarding duties, professional requirements, insurance requirements, complaint handling, or medico-legal record-keeping obligations.
5. Where we get your information
We collect personal information:
-
directly from you when you create an account, contact us, complete forms, submit health information, use the app or seek support
-
from your use of our website or app, including usage, technical and analytics data generated through your interactions with the service
6. Who we share your information with
We may share your information where necessary and lawful with:
-
healthcare professionals involved in your care, such as your GP or another clinician, where appropriate and with your consent where required
-
safeguarding bodies, regulators, law enforcement agencies, courts, insurers or legal advisers where we are required or permitted to do so
-
service providers who help us operate our app, website and business, such as:
-
cloud hosting and IT support providers
-
app, website and software providers
-
payment processors
-
analytics providers
-
communications, messaging and customer support providers
-
We require third-party service providers to keep personal information secure, process it only on our instructions where applicable, and comply with data protection law.
We do not sell your personal information.
7. International data transfers
Some of our service providers may store or process personal information outside the UK.
Where this happens, we will ensure that appropriate safeguards are in place to protect your information, such as:
-
a country that has been recognised as providing an adequate level of protection under UK law, or
-
the use of International Data Transfer Agreements, standard contractual clauses, or other legally recognised safeguards
8. How long we keep your information
We keep personal information only for as long as necessary for the purposes for which it was collected, including to provide our services, maintain appropriate healthcare records, comply with legal and regulatory obligations, resolve disputes, and protect patient safety.
Account information
We keep account and profile information while your account is active.
If you close your account, we will deactivate it. We will then delete or anonymise account information that we no longer need, usually within 90 days, unless we are required to retain it for legal, regulatory, safeguarding, fraud-prevention, security or record-keeping purposes.
Health and consultation records
Where you use our healthcare support services, we may retain relevant health, consultation and support records for up to 8 years after your last interaction with us in order to meet medico-legal, patient safety, safeguarding, insurance and regulatory obligations.
Closing your account does not necessarily mean that all health or consultation records will be deleted immediately. Where we are required to retain healthcare-related records for compliance or patient safety reasons, we will keep only the information we need for those purposes and restrict access appropriately.
Analytics data
We may keep analytics and app usage data for up to 24 months. Where possible, this data will be aggregated or anonymised.
Marketing data
We keep marketing preferences until you withdraw consent, opt out, or until we otherwise review and refresh that consent.
Anonymisation
Where appropriate, we may anonymise certain information so that it can no longer be linked to you. Once information has been anonymised, it is no longer personal data.
9. Your data protection rights
Under UK data protection law, you may have the following rights:
-
the right of access – to request a copy of the personal information we hold about you
-
the right to rectification – to ask us to correct inaccurate or incomplete information
-
the right to erasure – to ask us to delete your personal information in certain circumstances
-
the right to restrict processing – to ask us to limit how we use your information in certain circumstances
-
the right to object – to object to certain types of processing
-
the right to data portability – to request transfer of certain information to you or another provider
-
the right to withdraw consent – where we rely on consent, you can withdraw it at any time
These rights are not absolute and may be limited where we are required to keep information for legal, regulatory, safeguarding, public interest, healthcare record-keeping or medico-legal reasons.
To exercise any of your rights, please contact us at:
10. Automated decision-making
We do not make decisions about you based solely on automated processing.
Any health-related guidance or support we provide involves human review.
11. Cookies and analytics
We use cookies and similar technologies on our website and app to:
-
ensure the website and app function properly
-
remember preferences and improve usability
-
understand how users interact with our services
-
monitor performance and improve user experience
-
support analytics and service development
You can manage cookie preferences through your browser settings where applicable. We may also provide additional information in a separate Cookie Notice if required.
12. Data security
We take appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, disclosure or alteration.
These measures may include access controls, secure systems, encryption, and limiting access to personal information to those who need it for legitimate business, healthcare or legal purposes.
No online service can be completely secure, but we work to protect your information in line with applicable legal and professional standards.
13. How to complain
If you have any concerns about how we use your personal information, please contact us first and we will try to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Helpline: 0303 123 1113
Website: https://www.ico.org.uk
14. Changes to this privacy notice
We may update this privacy notice from time to time to reflect changes to our services, legal obligations or the way we use personal information.
If we make material changes, we will update the notice in the app or on our website and, where appropriate, notify you directly.