Privacy policy

On the Register (“we”, “us”) is a UK directory that checks weight-loss providers against the public registers and provides reference tools. For the data described here we are the data controller. You can reach us at privacy@ontheregister.co.uk.

• Browsing the site — the directory, the calculators and the reference pages need no account and no personal data. We use privacy-friendly, cookieless analytics (Vercel Analytics) that count page views without identifying you or tracking you across sites.
• Your account — if you sign in, we store your email address and, if you use Google, your name and profile picture. This is handled by our authentication provider (Supabase). We use it only to sign you in and to keep your tracker private to you.
• Your tracker (health data) — if you choose to use the tracker, we store what you enter: the schedule you were prescribed, the doses you log, your supply, and any weight or side-effect diary entries. This is special-category health data, and we store it only after you give explicit consent, which we record with its version. You can export or delete it at any time.
• The assistant — if you chat with the assistant, your messages are processed to answer them. For a signed-in user the assistant can read your own tracker data to answer your questions. We never put your health inputs into a URL, a log, or a shared transcript.

• Health data in the tracker: your explicit consent (Article 9(2)(a)). You can withdraw it at any time by deleting your data.
• Your account and sign-in: necessary to provide the service you asked for.
• Cookieless analytics: our legitimate interest in understanding, in aggregate, how the site is used.

• We never sell your data.
• We never use your health data for advertising or share it with advertisers.
• We don’t take commission on any treatment, and nothing you do here is shared with a provider without you asking.

We use a small number of processors, each under a data-processing agreement:

• Supabase — database and authentication (your account and tracker data).
• Google — if you choose “Continue with Google”, to sign you in.
• Vercel — hosting and cookieless analytics.
• Anthropic — the model behind the assistant, to process your chat messages.

Some of these process data outside the UK. Where they do, that transfer is covered by the appropriate UK safeguards (such as the International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses).

We use essential cookies only — the session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies, and our analytics are cookieless, so the site shows no cookie banner.

We keep your account and tracker data while your account is open. If you delete an entry, or your account, we delete the corresponding data; backups are purged on our normal cycle.

Under UK GDPR you can ask us to:

• give you a copy of your data (the tracker has a one-click export);
• correct it;
• delete it;
• restrict or object to how we use it;
• withdraw a consent you gave, without affecting what we did before you withdrew it.

Email privacy@ontheregister.co.uk to exercise any of these. If you’re unhappy with how we handle your data you can complain to the Information Commissioner’s Office (ICO).

If you think a medicine has caused a side effect, tell your prescriber and report it through the MHRA Yellow Card scheme. A Yellow Card report goes to the MHRA, not to us.

We’ll update this page when the service changes, and change the date at the top. See also our Terms of Service and Disclaimer.