Privacy notice

How GP Autopilot Consultations collects, uses and protects your personal information when you send an online consultation request to your GP practice.

Who we are

GP Autopilot Consultations is an online consultation service that lets you contact your GP practice online with a medical or administrative request. The service was previously known as v-Consult.

The service is operated by EyeV Limited (trading as GP Autopilot), a company registered in England and Wales (company number 12614372). Registered office: 29 Bridgford Road, West Bridgford, Nottingham, England, NG2 6AU.

You can contact us about privacy at cellan@eyev.health.

Who is responsible for your information

Your GP practice is the data controller for the information in your online consultation request and for your GP health record. The practice decides how your consultation is handled and is your first point of contact for questions about your health information, including requests to exercise your data protection rights. Your practice's own privacy notice and Data Protection Officer details are available from the practice.

EyeV Limited is a data processor acting on your GP practice's written instructions when it carries your consultation request to the practice.

EyeV Limited is a data controller in its own right for the limited technical information needed to run the service securely, such as security and audit logs.

Information we collect and use

• Details you give us in your request — the answers you type into the consultation form, which may include information about your health, symptoms and medication, and any documents or images you attach.
• Your details — name, date of birth, NHS number, contact details, and the GP practice you select.
• Technical information — limited security logs (such as IP address and request time) needed to keep the service safe.

Why we use your information and our lawful basis

Purposes and lawful bases

Purpose	Lawful basis (UK GDPR)
Sending your consultation request securely to your GP practice so it can provide you with care	Article 6(1)(e) public task, and Article 9(2)(h) provision of health care (with the safeguards in the Data Protection Act 2018, Schedule 1)
Matching your request to the correct patient and GP practice using the details you provide	Article 6(1)(e) public task, and Article 9(2)(h)
Keeping the service secure and preventing misuse (security and audit logs)	Article 6(1)(f) legitimate interests — running a safe, secure NHS-facing service
Meeting our legal and regulatory obligations	Article 6(1)(c) legal obligation

Who we share your information with

• Your GP practice — your consultation request is delivered to the practice you select, and becomes part of how the practice cares for you. Information you send may be added to your GP health record by practice staff.
• Cloudflare — provides the secure infrastructure, database and document storage this service runs on.
• Approved clinical service providers — where your practice chooses to use them for patient messaging, appointment booking or filing reviewed information to the clinical record. They receive only the information needed for that task.

We do not sell your information, and we do not share it with anyone else unless the law requires it.

Where your information is stored

Consultation records and uploaded documents are stored in access-controlled cloud infrastructure configured for the European Union. Where a service provider processes any data outside the UK, we make sure it is protected by UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement.

How long we keep your information

• Your request is retained in the consultation service on your GP practice's instructions while it is reviewed, responded to and filed. The practice's documented retention schedule applies.
• Information added to your GP health record is retained by the practice in line with the NHS Records Management Code of Practice.
• Operational and security logs are retained only for the documented period needed to keep the service safe and investigate incidents.

Your rights

You have rights over your personal information, including the right to:

• ask for a copy of your information (right of access)
• ask for inaccurate information to be corrected
• ask for your information to be deleted or restricted, in certain circumstances

Because your consultation becomes part of your GP record, the quickest way to exercise these rights is usually to contact your GP practice. You can also contact us at cellan@eyev.health.

Do you have to give us your information?

No — using this service is optional. But if you choose not to provide the information the form asks for, your GP practice will not be able to deal with your request through this service. You can always contact your practice by phone or in person instead.

Automated decision-making

This service does not make any automated decisions about your care. Every request is reviewed by staff at your GP practice, who decide what happens next.

Cookies and security

This service uses only strictly necessary cookies and similar technologies needed to keep it working and secure. It does not use advertising or analytics cookies.

Information is encrypted in transit, and access to systems is restricted to authorised staff. EyeV Limited completes the NHS Data Security and Protection Toolkit each year.

Questions and complaints

If you have a question or concern about how your information is used, please contact your GP practice or email us at cellan@eyev.health. We will do our best to put things right.

You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk/make-a-complaint
• Phone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Changes to this notice

We may update this privacy notice from time to time. Any changes will be published on this page.

Last updated: 1 July 2026