Privacy notice

Last updated: October 2026

Who we are

This website, www.drvepa.com, is run by Ojas Health Ltd, trading as Dr Vepa (registered in England and Wales, company number 15192333, registered office C/O Commercial Funding Solutions Ltd, 55 Station Road, North Harrow, Harrow, HA2 7SR). Ojas Health Ltd is the data controller for personal information collected through this website.

For any question about your data, email hello@drvepa.com.

Patient consultations and medical information

All private consultations with Dr Vepa are booked and delivered through Aeterna Health on the Helfy clinical platform. This includes booking, video consultations, messages, medical history, test results, clinical notes, prescriptions and payments.

All patient information is collected, stored and managed securely within the Helfy platform. It is not held on this website, in Ojas Health Ltd's own systems, or by email. Aeterna Health and Helfy are responsible for this information and handle it under their own privacy notices, which you will be shown before you book.

For this reason, please do not send any medical information through this website or by email. If you have a clinical question, please book a consultation.

What we collect

If you send a talk enquiry, we collect what you enter in the form: your name, organisation, role, email address, event date, audience size, preferred format and message. If you email us, we receive your email address and whatever you include in your message.

Like almost every website, our hosting provider automatically records basic technical information when you visit, such as your IP address, browser type and the pages you view. We use this only to keep the site secure and working.

Why we use it, and our lawful basis

We use your enquiry details to reply to you, discuss and arrange speaking engagements, and keep a record of our correspondence. Our lawful basis is our legitimate interest in responding to enquiries and running our business, or, where you ask us to provide a talk, taking steps at your request before entering into a contract. We do not use your details for marketing, and we never sell them.

Who we share it with

We use a small number of trusted service providers who process data on our behalf: Netlify, which hosts the website and receives enquiry form submissions, and our email provider. Fonts on this site are loaded from Google Fonts, which means your browser shares your IP address with Google. Some of these providers are based in, or store data in, the United States. Where that happens, transfers are protected by recognised safeguards such as the UK–US data bridge or the ICO's international data transfer agreements.

We will only share your information with anyone else if the law requires us to.

How long we keep it

We keep enquiry and email records for up to two years after our last contact with you, or longer if we go on to work together and need the records for accounting or legal reasons. Hosting logs are kept for a short period by Netlify under its own policies.

Your rights

Under UK data protection law, you have the right to ask for a copy of your information, and to ask us to correct it, delete it, restrict how we use it, or stop using it. You can also object to our use of it, and ask for it to be transferred to you or someone else. To make a request, email hello@drvepa.com. We will reply within one month.

Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes

We may update this notice from time to time. The date at the top shows when it last changed.