Privacy Policy
This privacy policy explains how Ogovy collects, uses, stores and protects personal information when you use our website. Ogovy is an independent UK information and price-comparison website for weight-loss treatments. We do not sell medicines, prescribe treatment, assess medical suitability or provide medical advice.
Ogovy is operated by MedStack Ltd, which also operates Monj. For privacy questions, data requests or concerns, use the Monj contact page.
Short version
Most visitors can read Ogovy without directly giving us personal information. We may collect technical information to run and protect the website, limited contact details if you message us, cookie choices, security logs, and limited provider or referral information where needed for website operation.
We do not send marketing emails, newsletters, marketing text messages, WhatsApp marketing, push marketing or promotional messages. We do not sell visitor contact details. We do not need your medical history, identity documents, prescription answers, payment card details or private clinical information.
Please do not send personal, medical or sensitive information. Ogovy is not a pharmacy, clinic, prescriber or medical service. Do not send full medical histories, prescription answers, diagnosis letters, NHS numbers, passport or driving licence images, payment card details, body photographs, private consultation notes, screenshots showing medical records, or anything urgent.
If we receive unnecessary personal, medical, financial or highly sensitive information, we aim to delete or remove it as soon as we identify it. Where technically possible, we will not copy it into working notes or use it for any purpose beyond handling the immediate message.
There may be limited cases where we keep a minimal record, for example to handle a complaint, protect the website, investigate abuse, comply with the law, deal with a regulator, or establish, exercise or defend legal claims. Backups and security logs may also take time to expire through normal deletion cycles.
Urgent medical issues: Do not use Ogovy or Monj contact forms for urgent medical help. Contact NHS 111, 999 in an emergency, your prescriber, pharmacist or another qualified healthcare professional.
1. Who we are
This policy applies to Ogovy, available at https://ogovy.co.uk.
Ogovy is an independent UK information and price-comparison website. It helps users understand visible provider prices, treatment information and public safety context.
Ogovy is operated by MedStack Ltd. Privacy questions, correction requests, complaints and data requests should be sent through https://monj.co.uk/contact/.
2. Who this privacy policy applies to
This policy applies when you use Ogovy or interact with us about Ogovy.
People who browse pages, compare information, click links or use website features.
Anyone who sends a message, correction, complaint, safety concern or enquiry.
Pharmacies, clinics, agencies, platforms or other businesses that contact us about listings or corrections.
People who leave comments, if comments are enabled on any part of the website.
3. No marketing emails, newsletters or promotional messages
Ogovy does not operate as a mailing list and we do not use visitor contact details for promotional messaging.
We do not send Ogovy newsletters, promotional email campaigns, discount-code alerts or general marketing updates to visitors.
We do not send marketing text messages, WhatsApp marketing, push marketing, social media direct-message marketing or promotional notifications.
We do not sell visitor names, email addresses, contact details or enquiry details to pharmacies, clinics, advertisers, brokers or data lists.
If you contact us, we may reply to your message. That reply is a service or administrative response to the issue you raised, not a marketing email.
4. Personal information we may collect
We try to keep collection limited and proportionate. The information we collect depends on how you use the website.
| Category | Examples | When this may happen |
|---|---|---|
| Contact information | Name, email address, business name, job role and message details. | When you contact us, send a correction, make a complaint or ask a question. |
| Message content | Provider concerns, price corrections, website feedback, safety concerns, screenshots, links or documents you choose to send. | When you voluntarily include this information in a message. |
| Technical information | IP address, browser type, device type, operating system, page URL, referral URL, date, time and general request data. | When your browser requests pages, images, scripts, forms or other website resources. |
| Security information | Firewall logs, rate-limit logs, blocked requests, suspicious request patterns, spam markers and abuse reports. | When we protect the website, prevent spam, reduce attacks or investigate scraping and abuse. |
| Cookie and consent information | Cookie choices, consent status, preference cookies and basic device identifiers where used. | When cookies or similar technologies are used to run the site or remember choices. |
| Comment information | Name, email address, comment text, IP address, browser user agent and moderation status. | If comments are enabled and you leave a comment. |
| Provider and commercial information | Business contact details, listing correspondence, public register details, referral issue details, correction records and invoice-related records. | When providers or representatives contact us, or when we administer provider relationships. |
| Referral and attribution information | Click source, landing page, pseudonymous tracking IDs, broad referral outcome, status or commercial attribution data. | When links are used to understand whether Ogovy or Monj referred traffic or orders. We aim to keep this limited and non-clinical. |
| Public-source information | Public register data, provider website details, review information, regulator pages and publicly available business details. | When we check accuracy, provider status, pharmacy registration, safety context or listing information. |
5. Information we do not ask visitors to send
Ogovy is not a clinical intake service. We do not need sensitive personal information from visitors to run a price-comparison and information website.
Do not send medical histories, diagnoses, prescription answers, consultation records, side-effect diaries, dose plans, BMI evidence or treatment suitability information.
Do not send passport images, driving licence images, NHS numbers, national insurance numbers, proof-of-address documents or identity checks.
Do not send payment card numbers, bank details, payment screenshots showing private information or provider account login details.
Deletion approach: If unnecessary personal, medical, financial or highly sensitive information is sent to us, we aim to delete or remove it as soon as we identify it. We may keep only the minimum record needed if there is a legal, security, complaint-handling, regulatory or dispute reason to do so.
6. Health information and sensitive information
Ogovy does not need detailed health information from visitors. We are not a clinical service and we do not assess whether any treatment is suitable for you.
Please do not send health information unless a website-related issue needs it. This includes full medical histories, prescription forms, screenshots of consultations, diagnosis letters, ID documents, order records showing private medical details, or anything urgent.
If you send unnecessary health information or other highly personal information, we aim to delete or remove it as soon as we identify it. We will not use it for marketing, profiling, eligibility checks, prescribing decisions or treatment recommendations.
In limited cases, we may keep a minimal record if we need it for a complaint, legal issue, security investigation, regulator enquiry, safety concern, or to establish, exercise or defend legal claims. Technical backups may also retain deleted material for a limited period before being overwritten.
We do not use visitor information to decide whether someone can use Wegovy, Mounjaro or any other treatment.
Suitability decisions must come from a qualified prescriber or healthcare professional, not Ogovy.
Do not send prescription answers, private health records or identity documents through Ogovy or Monj contact forms.
7. Why we use personal information
We use personal information for clear website, safety, communication, legal and operational reasons.
Website and user purposes
- to operate, maintain and improve Ogovy;
- to answer messages, corrections, concerns and complaints;
- to remember privacy and cookie choices;
- to understand broad website performance and usability;
- to make pages easier to use, safer and more accurate;
- to check whether links, pages, forms and security tools work properly.
Safety, compliance and business purposes
- to protect the website from spam, scraping, attacks and misuse;
- to investigate provider corrections, listing concerns and public safety issues;
- to preserve evidence where needed for disputes or legal claims;
- to administer provider relationships, referral attribution and invoices;
- to comply with legal, accounting, regulatory and tax obligations;
- to respond to regulators, courts, law enforcement or professional advisers where appropriate.
8. Our UK GDPR lawful bases
UK data protection law requires a lawful basis when personal information is used. Different activities can rely on different lawful bases.
| Purpose | Likely information used | Lawful basis |
|---|---|---|
| Running and protecting the website | IP address, device data, browser data, logs and security events. | Legitimate interests: keeping Ogovy secure, available and working properly. |
| Responding to enquiries | Name, email address, message content and details you provide. | Legitimate interests: replying to messages and managing website-related issues. |
| Handling provider corrections, listing issues and safety concerns | Business contact details, correspondence, evidence, public register information and relevant website details. | Legitimate interests: keeping information accurate, safe and useful for users. |
| Referral attribution and commercial administration | Pseudonymous click IDs, source data, broad referral outcomes, invoice records and provider correspondence. | Legitimate interests and, where relevant, contract performance or steps linked to commercial arrangements. |
| Cookies that are strictly necessary | Security cookies, session cookies and privacy preference cookies. | Legitimate interests or legal obligation, depending on the cookie purpose. |
| Optional analytics, advertising or non-essential cookies | Analytics identifiers, device data, visit data and similar information where enabled. | Consent, where required by PECR and UK GDPR. |
| Legal, regulatory, accounting or dispute handling | Relevant correspondence, records, invoices, logs, notices and evidence. | Legal obligation and/or legitimate interests, depending on the situation. |
| Health or special category information sent by accident | Unnecessary health or sensitive details included in a message. | Our aim is deletion, not ongoing use. If limited retention is unavoidable, it will usually be for legal claims, complaint handling, security, regulatory or legal-obligation reasons. |
9. Cookies and similar technologies
Cookies are small files placed on your device. Similar technologies can also store or access information on your device. UK rules distinguish between strictly necessary cookies and optional cookies.
These help the website work, keep it secure, remember privacy choices, support forms, prevent abuse or support basic WordPress functions.
These may help us understand broad website use and performance. Where analytics cookies are not strictly necessary, they should only run with proper consent.
Embedded content, maps, videos, social posts, feeds or external tools may set cookies or collect data as if you visited that website directly.
WordPress cookies
If comments are enabled and you leave a comment, you may be able to opt in to saving your name, email address and website in cookies so you do not need to re-enter them next time. These cookies may last for one year.
If you visit a login page, WordPress may set a temporary cookie to check whether your browser accepts cookies. This cookie contains no personal data and is usually removed when you close your browser.
If an authorised user logs in, WordPress may set cookies to save login information and screen display choices. Login cookies usually last for two days, while screen option cookies may last for a year. If “Remember Me” is selected, login may persist for two weeks. Logging out removes login cookies.
If an authorised user edits or publishes an article, WordPress may save an additional cookie in the browser. This normally contains no personal data and simply indicates the post ID of the article edited. It usually expires after one day.
Cookie choice: You can usually control cookies through your browser settings. If Ogovy uses a cookie banner or preference tool, use that tool to accept, reject or change optional cookie choices where available.
10. Analytics, hosting, caching and security tools
Ogovy may use website tools that help keep the site fast, safe and reliable.
Hosting providers may process technical logs so the website can load, errors can be fixed and abuse can be investigated.
Security tools may process IP addresses, request patterns, blocked requests and other technical data to protect the site.
Caching services may process requests to make pages load faster and reduce server load.
Analytics tools may process broad usage information where enabled and where required consent has been given.
11. Provider links, referral links and external websites
Ogovy links to third-party pharmacies, clinics, regulators, official registers, medicine information pages and other resources.
The destination website may receive normal technical information, such as your IP address, browser details, device details and the page or website you came from. The destination website’s own privacy policy then applies.
Some links may include referral or attribution information so a provider can identify that a visit or order came from Ogovy or Monj. We aim to keep this limited and proportionate.
Clinical information stays with the provider: If you complete a consultation, provide health information, upload ID, pay for a service or order medicine on a provider website, that information goes to the provider, not Ogovy. Their privacy policy and clinical process apply.
12. Comments, public submissions and Gravatar
If comments are enabled, public comments can be read by others and may be indexed by search engines or AI crawlers.
When visitors leave comments, we may collect the data shown in the comment form, plus the visitor’s IP address and browser user agent string to help detect spam.
An anonymised string created from your email address, also called a hash, may be provided to Gravatar to check whether you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/.
13. Media uploads and files
If Ogovy allows file or image uploads now or in the future, take care with hidden data in files.
If you upload images to the website, avoid uploading images with embedded location data, such as EXIF GPS data. Visitors may be able to download and extract location data from images published on a website.
14. Embedded content from other websites
Pages on Ogovy may include embedded content such as videos, images, articles, social posts, feeds, maps or other interactive tools.
Embedded content from other websites behaves in the same way as if you visited the other website directly. Those websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content, especially if you are logged into an account with that service.
15. Search engines, AI crawlers and public pages
Ogovy is a public website. Public pages may be crawled, indexed, summarised or referenced by search engines and AI systems, depending on their crawler behaviour and our technical controls.
Public page text, public comments, public notices and public provider information may be visible to search engines, browser tools, AI assistants and other crawlers.
We do not publish messages you send us as website content. They may still be processed by the tools we use to receive, secure, store or respond to messages.
16. Who we may share personal information with
We do not sell visitor personal information. We do not share visitor contact details for marketing. We do not send pharmacies, clinics or providers your medical history, prescription answers, private health details or identity documents.
- website hosting, infrastructure, DNS, caching, security and backup providers;
- WordPress, plugin, theme, technical support and maintenance providers;
- email, form, support and communication services used to receive and respond to messages;
- spam detection, firewall, bot protection and security services;
- analytics providers, where enabled and where consent requirements are met;
- professional advisers, including legal, accounting, insurance, technical and compliance advisers;
- regulators, law enforcement, courts, government bodies or other authorities where required or appropriate;
- pharmacies, clinics or providers where needed to investigate a correction, listing issue, referral issue, complaint, safety concern or commercial matter;
- payment, invoicing or accounting services where relevant to provider or commercial administration.
17. International transfers
Some website, email, security, analytics, hosting or software providers may process information outside the United Kingdom.
Where personal information is transferred outside the UK, we expect appropriate safeguards to be used where required by data protection law. These may include adequacy arrangements, contractual safeguards, technical protections or equivalent measures used by the relevant service provider.
18. How long we keep personal information
We keep personal information only for as long as reasonably needed for the purpose collected, including website operation, security, legal, accounting, reporting, dispute, fraud-prevention and compliance purposes.
| Type of information | Typical retention approach | Why it may be kept |
|---|---|---|
| General contact messages | Usually up to 24 months. | To reply, keep context and handle follow-up questions. |
| Unnecessary personal, medical or sensitive information sent to us | Deleted or removed as soon as we identify it, where technically possible, unless a minimal record must be kept. | Deletion is the aim. Minimal retention may apply for complaints, legal claims, security, regulatory matters or abuse investigation. |
| Provider, listing or commercial correspondence | Usually up to 6 years where relevant. | Business records, evidence, accounting, disputes, provider checks and compliance. |
| Security logs and technical logs | Usually 30 to 180 days, unless needed longer. | Security, abuse prevention, scraping investigations, error diagnosis and legal protection. |
| Comments and comment metadata | May be kept indefinitely. | To preserve public discussion, recognise follow-up comments and support moderation. |
| Cookie consent records | For as long as needed to remember and evidence choices. | To respect user choices and meet cookie/privacy compliance needs. |
| Analytics data | Depends on the analytics tool settings. | Website performance, broad visitor behaviour and page improvement. |
| Backups | Kept for a limited backup cycle, then overwritten or deleted. | Site restoration, disaster recovery and security resilience. |
| Legal, regulatory or dispute records | As long as needed for the matter and any limitation period. | Legal claims, defence, complaints, regulatory engagement and evidence preservation. |
Longer retention: We may keep information for longer if needed to establish, exercise or defend legal claims, comply with legal obligations, prevent abuse, protect our database, investigate scraping or deal with regulatory issues.
19. Your UK data protection rights
Depending on the situation, UK data protection law may give you rights over your personal information.
You can ask for a copy of personal information we hold about you.
You can ask us to correct inaccurate or incomplete personal information.
You can ask us to delete personal information in certain circumstances.
You can ask us to restrict how we use personal information in certain circumstances.
You can object to certain processing, including processing based on legitimate interests.
You may have a right to portability in some cases, and you can withdraw consent where we rely on consent.
20. Complaints
Please contact us first so we can look into the issue properly.
Use https://monj.co.uk/contact/ for privacy questions, data requests or concerns about how Ogovy handles personal information.
You can also complain to the Information Commissioner’s Office, the UK data protection regulator. The ICO website is https://ico.org.uk/.
21. Security
We use reasonable technical and organisational measures to protect the website and personal information.
We limit access to people and services that need it for website, security, support or business reasons.
Security tools may monitor suspicious traffic, failed requests, bot activity, spam and abuse patterns.
We may use software updates, backups and recovery processes to keep the website stable.
No website, email system or internet transmission can be guaranteed completely secure.
22. Children
Ogovy is not designed for children and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us through https://monj.co.uk/contact/.
23. Automated decision-making
We do not use visitor personal information to make automated medical, prescribing, suitability, eligibility or treatment decisions. Ogovy does not decide whether a treatment is suitable for you.
24. Direct marketing position
Ogovy does not send marketing emails, newsletters, discount-code alerts, SMS marketing, WhatsApp marketing, push marketing, phone marketing or postal marketing to visitors. We do not use contact form details to build a marketing list.
If you receive a reply from us after contacting Ogovy or Monj, that reply is an administrative response to your message. It is not a marketing subscription.
25. Changes to this privacy policy
We may update this privacy policy when the website changes, our tools change, our provider processes change, or legal, technical or operational requirements change. The latest version will appear on this page with an updated date.
Contact us about privacy
For privacy questions, data requests, correction requests, complaints or concerns about how Ogovy handles personal information, please use the Monj contact page. Do not send medical records, prescription answers, ID documents, payment details or urgent medical information.
Contact via MonjSources referenced on this page
Standing primary references for every Ogovy page:
- Wegovy (semaglutide) Summary of Product Characteristics and Patient Information Leaflet, electronic medicines compendium
- MHRA Drug Safety Update: GLP-1 receptor agonists
- NICE TA875: semaglutide for managing overweight and obesity
- General Pharmaceutical Council register of pharmacies
- MHRA Yellow Card scheme
