Privacy Notice
Last updated: 17 June 2026
This notice explains how [LEGAL ENTITY NAME] ("we", "us", "our") collects and uses your personal data when you use this website or make an enquiry. We are the data controller for this information.
Who we are
- Legal entity: [LEGAL ENTITY NAME], [COMPANY NUMBER]
- Registered address: [ADDRESS]
- Contact: [CONTACT EMAIL] · [PHONE]
- Data Protection Officer / contact: [DPO NAME / EMAIL, if applicable]
- ICO registration number: [ICO REGISTRATION, if applicable]
What data we collect
When you submit the enquiry form, we collect:
- Your name
- Your email address
- Your phone number (if you provide it)
- Any message you choose to send us
- Limited technical data (e.g. browser user-agent and the time of submission)
Please do not include sensitive medical details in the enquiry form. Any health information needed for your care will be collected separately and securely by a clinician, with appropriate safeguards.
Why we use it and our legal basis
- To respond to your enquiry. Our legal basis is your consent (UK GDPR Article 6(1)(a)), which you give by ticking the consent box. You can withdraw consent at any time.
- To provide and arrange care (if you proceed). This is handled under the separate, clinician-led process referred to above, where additional legal bases apply (for example, provision of health care under Article 9(2)(h)).
Special category (health) data
Information about your health is "special category" data and is given extra protection under data protection law. We only process it where an additional condition under UK GDPR Article 9 applies, and we apply appropriate safeguards. [CONFIRM SPECIFICS WITH YOUR ADVISER]
How we store and protect it
Enquiry submissions are stored in a secured database hosted by Supabase, in the United Kingdom (London region). Access is restricted, and the website itself cannot read back stored enquiries. We apply technical and organisational measures to keep your data secure.
Who we share it with
- Our hosting and database providers (Cloudflare, Supabase) acting as our processors
- The clinicians and team members involved in responding to your enquiry
- [ANY OTHER PROCESSORS, e.g. email, CRM]
We do not sell your personal data.
How long we keep it
We keep enquiry data for [RETENTION PERIOD] unless you ask us to delete it sooner, or we are required to keep it longer (for example, for clinical record-keeping obligations). [CONFIRM RETENTION POLICY]
Your rights
You have rights to access, correct, delete, or restrict use of your data, to object to processing, to data portability, and to withdraw consent. To exercise any of these, contact us at [CONTACT EMAIL].
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
This website [does not currently use non-essential cookies / uses the following cookies: …]. [CONFIRM AND UPDATE]