Privacy notice

Fit to Drive is a trading name of IMAS Medical Services Ltd, a company registered in England and Wales.

We decide how your personal information is used, which makes us the controller of it under UK data protection law. You can contact us by post at Lime Square Medical Centre, Ashton Old Road, Manchester, M11 1DA.

When you book, we ask for:

• Your full name, date of birth and sex
• Your phone number and email address
• The licensing authority you are applying to, if your medical is for a council
• Your driving licence number, if you give it
• The appointment you choose and how you pay

At your appointment, the doctor records:

• A check of your identity against your driving licence
• Your medical history and the medication you take
• Measurements such as blood pressure, pulse, height, weight and the eye test
• The doctor's findings and the outcome they record
• The forms and letters completed for you, and your registered GP practice

Information about your health is special category data. We take particular care with it, as the rest of this notice explains.

• To book and carry out your medical and complete your form. This is needed to provide the service you asked for, so the legal basis is our contract with you.
• To record your health information. The legal basis is the provision of health care by a health professional who owes you a duty of confidentiality, under Article 9(2)(h) of the UK GDPR and the Data Protection Act 2018.
• To keep accounting and payment records. We are required to by law.
• To send booking confirmations and appointment reminders, as part of providing the service.
• To remind you when your next medical is likely to be due. This is in our legitimate interests and yours, and you can stop these reminders at any time from the link in the email or by contacting us.
• To see how this website is used, with Google Analytics, only if you accept analytics cookies. The legal basis is your consent, which you can withdraw at any time.

We do not sell your information, use it for advertising, or use it to train software.

Your information is seen by our doctors and clinic staff, each with their own login. Every time a medical record is opened, the system records who opened it and when.

We give your completed form to you. We do not send it to your licensing authority or the DVLA on your behalf.

We share your medical information with others only when you ask us to, or when the law or professional guidance requires it. In rare cases, General Medical Council guidance allows a doctor to tell the DVLA about a condition that affects your fitness to drive, normally after discussing it with you.

If your employer has an account with us and pays for your medical, they receive an invoice showing the appointment.

We use these organisations to run the service. Each works under a written agreement and only on our instructions:

• Render, which hosts the booking and records system on servers in Frankfurt, Germany
• Stripe, which takes card payments. Your card details go straight to Stripe and we never see your full card number
• An email service with servers in the UK or the European Union, which sends confirmations and reminders
• Bytes, the company that builds and maintains the system for us
• Google, which provides Google Analytics, only if you accept analytics cookies

Your information is kept in the UK and the European Economic Area. Stripe may process payment information outside the UK, with the safeguards UK law requires for that transfer.

It is encrypted when it is sent and when it is stored. Staff sign in with two factor authentication to reach medical records, and a signed medical record cannot be altered afterwards. Any correction is added as a new record.

Booking and payment records are kept for 7 years, which covers our legal duties for accounts and tax.

Medical records are kept for as long as professional guidance on medical records requires. After that they are anonymised, so they no longer identify you.

You have the right to:

• Ask for a copy of the information we hold about you
• Ask us to correct anything that is wrong
• Ask us to delete your information. We may need to keep medical records for the period above, and will tell you if so
• Object to, or ask us to restrict, how we use it
• Ask for your information in a form you can take elsewhere
• Stop recall reminders at any time

You can contact us by post at Lime Square Medical Centre, Ashton Old Road, Manchester, M11 1DA. We will answer within one month.

If you are unhappy with how we have used your information, please tell us first so we can put it right.

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

This website sets no cookies of its own, and no analytics cookies unless you accept them. It uses no advertising trackers.

If you accept, Google Analytics sets cookies named _ga, which last up to two years, so we can see which pages are visited, how people find the site and whether a booking was finished. Google receives the pages you view and which medical you chose, never your name, contact details or anything about your health. Advertising features are switched off. Google may process this information in the United States, with the safeguards UK law requires.

You can change your choice at any time from Cookie settings at the bottom of every page. Rejecting removes the analytics cookies.

If you pay by card, the payment step is provided by Stripe, which uses cookies to prevent fraud. Those are covered by Stripe's own privacy policy.

We will update this notice if how we use your information changes. It was last updated on 2 October 2026.