Last updated 27 August 2026
If you are a surgeon or a hospital professional, RepHQ may hold professional information about you even though you have never used our software. This page explains where that applies, what we hold, and what you can ask us to do about it.
The short version: we hold professional information about clinicians — the kind already published by national registries and regulators — so that medical device representatives can prepare properly before meeting you. We hold nothing about your health, and nothing about your patients. We hold it only in markets where RepHQ actually operates, which today means the United Kingdom only.
REPHQ LTD is the data controller for the information described on this page. We are registered in England and Wales, company number 17256173, at 91 Bates Avenue, Darlington, DL3 0TS, and registered with the UK Information Commissioner's Office under reference ZC231873.
We make software used by orthopaedic device sales representatives. We are not a healthcare provider and we have no role in patient care.
This site describes eleven markets. RepHQ is live in the United Kingdom only. The other countries are mapped — we have identified the national registry and the segments it covers — but no product runs there and we hold no information about clinicians in those countries.
If you practise in the United Kingdom, the full notice is on our UK site: rephq.co.uk/healthcare-professionals.html. It sets out exactly what we hold, the sources it came from, and how to exercise your rights.
Before RepHQ operates in any further country we will publish the equivalent notice for that country, naming its registry and regulator as sources, and we will do so before we hold anything about its clinicians — not afterwards.
| Identity and registration | Name, and the registration number held by the national medical regulator |
|---|---|
| Practice | The hospitals where you operate, and the clinical segments you work in |
| Activity | Procedure volumes and implant usage, derived from published national registry data |
| Outcomes | Publicly reported outcome measures relating to your practice |
| Photograph | A photograph of you, taken only from an image already published on your hospital or private practice website, so that a representative can recognise you |
| Commercial contact | Where a representative has met you, their own notes of that professional meeting and any implant preferences you expressed |
You did not give us this information. It comes from published national registry and regulator sources, published health service and outcome data, benchmark implant ratings, your hospital's or practice's own website in the case of a photograph, and from representatives who have met you in the case of meeting notes. We do not photograph clinicians and we use only images you or your organisation have already published.
Our lawful basis is legitimate interests. Our interest is enabling a lawful, informed commercial relationship between a device supplier and the clinicians who choose and use its products — the same relationship that already exists in person, supported by information that is already published.
We hold this information about you in your professional capacity only. We have considered the effect on you and concluded that professional information, used to prepare for professional meetings, does not override your rights. If you disagree, section 6 tells you what to do, and you do not need to give a reason.
If you believe anything in these categories has been recorded about you, tell us and we will remove it.
You can ask us to tell you what we hold about you and give you a copy, correct anything inaccurate or out of date, delete it, restrict what we do with it while a question is resolved, or stop holding it at all.
If you object, we must stop unless we can show compelling legitimate grounds that override your rights. In practice we expect to honour objections. Where a request concerns a representative's meeting notes, their employer is the controller — we will pass your request on and help them answer it, and we will tell you who they are.
Email requests@rephq.co.uk. We will respond within one calendar month, and there is no charge.
Please tell us first — we would rather put something right than have you go elsewhere. You also have the right to complain to the data protection authority in your own country. Ours is the UK Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, 0303 123 1113 · ico.org.uk.
If we change what we hold, why, or which countries this applies to, we will update this page and revise the date at the top. Where a change is significant we will say what changed rather than quietly replacing the text.