Data security

Dr Fox (Index Medical Ltd) uses advanced SSL/TLS encryption to secure all traffic to and from www.doctorfox.co.uk, ensuring your medical and personal data cannot be intercepted or read by third parties.

Our infrastructure is shielded by advanced firewalls and intelligent threat detection systems that actively monitor traffic and block malicious attempts to access our systems.

Our server environments undergo continuous monitoring and automated updates to maintain the highest level of defense against modern security threats.

Qualys SSL Labs rate the server security as A+.


Personal online security

Patients using the Dr Fox service take responsibility for their own personal online security. For advice please visit the Get Safe Online service.

  • If your email account(s) is compromised it can be used to gain access to your Dr Fox account. Dr Fox does not send sensitive personal details by email, but it is recommended to delete any emails no longer needed.
  • Use unique passwords, with a mix of numbers, letters (lower and uppercase), preferably at least 12 characters long.
  • Change passwords regularly.
  • Install anti-virus software on your computer and keep up-to-date.
  • Keep operating system and browser software up-to-date.
  • Do not save passwords on the web browser on shared computers.
  • Remember to log-out of your Dr Fox account when finished.
  • Use a pin code or fingerprint ID to access your personal devices.
  • Check your security and privacy settings on your browser, paying particular attention to saving of websites visited.
  • Carefully check the URL (shown in browser address bar) of any website you visit to determine it is authentic.

PCI Compliant

PCI logo

www.doctorfox.co.uk is 'Payment Card Industry Data Security Standards' (PCI DSS) compliant and is regularly scanned for server vulnerabilities that could be exploited by hackers in security audits by Security Metrics.

Customer's payment card details are not stored on our servers (payment security).


Personal and private information

We fully understand our customers are concerned with the security of their personal and private data and we take every measure possible to ensure it is never at risk.

Index Medical Ltd abides by the Data Protection Act - our Information Commissioner's Office's Register Entry Report certificate registration number is Z258592X (renews 15 March annually).

The GDPR directive came into force in May 2018 and remains in effect, and Index Medical Ltd is fully compliant.

Please also see our Privacy Policy statement.