Privacy notice

Who we are

[Clinic's legal name and trading name], [registered address]. We are the controller of the personal information described here. ICO registration number: [number]. Contact for privacy questions: [email and phone].

What we collect when you book online

• Your name, mobile number and email address.
• The treatment, date and time you book, and any changes or cancellations you make.
• The messages we send you about your booking (confirmations, reminders and changes).

The booking page does not ask any health questions. If you visit the clinic, we may also record consent forms, which can include information about your health. [Clinic to describe how health information is handled.]

Why we use it, and our lawful basis

To arrange and manage your appointments and to contact you about them. [Lawful basis for booking data, and the separate condition for health information, to be confirmed by the clinic.]

We only send offers or news if you have said you are happy to receive them. [Clinic to confirm.]

Who handles it for us

These services store or send information for us, under agreements with us: [Clinic to confirm the final list and that each agreement has been accepted]

• Supabase — the booking database [region to confirm, planned: London]
• Brevo — emails
• Twilio — text messages
• Cloudflare — this website
• GitHub — encrypted nightly backups
• Meta (WhatsApp) — only if WhatsApp messages are switched on

How long we keep it

[Retention periods for booking records, messages and consent forms, to be set by the clinic.]

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object to how we use it. [Clinic to confirm wording and how to make a request.] You can also complain to the Information Commissioner's Office (ico.org.uk).

[Date this notice was last updated]