LEGAL · PRIVACY NOTICE
Privacy, plainly.
This notice covers toca.health, the website. Data processed inside NHS Trust deployments is governed by each contract and data-processing agreement, not by this page.
Who we are
toca.health is operated by TocaLabs Limited, trading as Toca, registered in England & Wales, company no. 11396834, VAT GB 303504844, based in Reading, United Kingdom. For anything in this notice, contact info@toca.health.
What this site collects
This website sets no advertising cookies and runs no third-party analytics trackers. Videos are hosted on YouTube and load only when you press play; at that point YouTube (in privacy-enhanced mode) may set its own cookies under Google’s privacy policy.
The contact form
If you use the contact form, we collect what you type, typically your name, organisation, work email, role and message, solely to respond to your enquiry. Our lawful basis is legitimate interest in responding to business enquiries. Form submissions are handled by our hosting provider and delivered to the Toca team.
Retention
We keep enquiry correspondence for as long as needed to handle it and any follow-up, then delete it in the normal course of business. We don’t add you to marketing lists without asking.
Your rights
Under UK GDPR you can ask us for access to, correction of, or deletion of your personal data, and you can object to our processing. Email info@toca.health and we’ll respond promptly. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Last updated: August 2026.