Privacy Policy

Who we are

• Address: [PRACTICE_ADDRESS]
• Privacy enquiries: [PRACTICE_EMAIL]
• Telephone: [PRACTICE_PHONE]

We are responsible for the personal information covered by this policy. Information about clinical records and treatment-related processing is provided separately where appropriate.

Information we collect

Depending on how you use this website, we may collect:

• Contact details you provide, such as your name, email address, and telephone number.
• The contents of enquiries and correspondence.
• Appointment details where an appointment service is available.
• Technical information processed by the website and its service providers, such as IP addresses, browser information, access times, and security logs.

Technical information processed for this website:

[TECHNICAL_DATA_DETAILS]

Why we use information

We use personal information to respond to enquiries, manage requested appointments and services, maintain website security, meet legal obligations, and deal with complaints or disputes.

Where European or UK data protection law applies, the lawful bases for each purpose are set out in the regional sections below.

Health information

Please do not submit medical history, diagnoses, identification documents, or other sensitive information through a general enquiry form. Contact us to arrange an appropriate way to share information needed for your care.

Health information collected during care, through patient portals, or through dedicated clinical forms may be covered by additional patient privacy information. Where applicable, that information explains the purposes, legal requirements, disclosures, and rights relevant to those records.

Who receives information

Information may be accessed by authorised clinic personnel and service providers supporting the website, communications, booking, or payment functions, where applicable. It may also be disclosed where required by law or necessary for legal claims.

Service providers and recipients relevant to this website:

[PROVIDERS_AND_RECIPIENTS]

International processing and transfers

Our service providers may process personal information in countries other than the country where you live.

Locations and arrangements relevant to this website:

[PROCESSING_LOCATIONS_AND_TRANSFER_DETAILS]

Where applicable law requires safeguards for an international transfer, we use the arrangements described here:

[APPLICABLE_TRANSFER_SAFEGUARDS_AND_INFORMATION_REQUEST_METHOD]

How long we keep information

We keep information for the periods needed for its purpose and applicable legal requirements.

• Enquiries and correspondence: [ENQUIRY_RETENTION_PERIOD_OR_CRITERIA]
• Appointment records: [BOOKING_RETENTION_PERIOD_OR_CRITERIA]
• Transaction and accounting records: [ACCOUNTING_RETENTION_PERIOD_OR_CRITERIA]
• Technical and security logs: [LOG_RETENTION_PERIOD_OR_CRITERIA]

Clinical records, where applicable, are subject to separate retention arrangements.

Your privacy rights

Depending on applicable law and the circumstances, you may have rights to access, obtain a copy of, correct, delete, or restrict the use of your personal information. You may also have rights to object to certain processing, withdraw consent, or opt out of certain uses or disclosures.

To make a request, contact [PRIVACY_CONTACT_EMAIL] or use [PRIVACY_REQUEST_METHOD].

We will handle requests within the time required by applicable law. We may need proportionate information to verify your identity or authority to act for another person. Some rights are subject to exceptions and limitations, which we will explain where relevant.

Providing information

Fields marked as required are needed to handle the relevant request. If you do not provide those details, we may be unable to respond or arrange the service. Optional fields are identified separately.

Cookies and similar technologies

This website’s cookies, local storage, embedded services, and similar technologies are described here:

[ACTUAL_TECHNOLOGIES_PURPOSES_PROVIDERS_AND_DURATIONS]

Available choices and how to change them:

[WORKING_PRIVACY_CONTROLS]

Automated decisions

[AUTOMATED_DECISION_DETAILS]

Additional information for the European Economic Area

Where the EU General Data Protection Regulation applies, we explain the purposes and lawful bases for processing your personal data below:

[PURPOSES_AND_EU_LAWFUL_BASES]

Where we rely on legitimate interests, those interests are:

[LEGITIMATE_INTERESTS]

Where special-category data, including health data, is processed, the applicable additional condition is:

[APPLICABLE_SPECIAL_CATEGORY_CONDITION]

Subject to the relevant conditions, your rights may include access, rectification, erasure, restriction, portability, and objection.

Right to object: you may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

We normally respond to rights requests within one month. Where the law permits an extension, we will explain the reason and timing.

You may complain to a competent data protection supervisory authority, including in the EEA country where you habitually reside, work, or believe an infringement occurred.

Relevant supervisory authority:

[EU_SUPERVISORY_AUTHORITY_NAME_AND_URL]

Additional information for the United Kingdom

Where UK data protection law applies, the purposes and lawful bases for processing your personal information are:

[PURPOSES_AND_UK_LAWFUL_BASES]

Where we rely on legitimate interests, those interests are:

[LEGITIMATE_INTERESTS]

Where special-category information, including health information, is processed, the applicable additional condition and relevant requirements are:

[UK_SPECIAL_CATEGORY_PROCESSING_DETAILS]

Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability, and objection.

Right to object: you may object to processing based on legitimate interests on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

We normally respond to rights requests within one month, subject to applicable rules concerning verification, clarification, and permitted extensions.

You may complain to the Information Commissioner’s Office. Information about raising a concern is available at ico.org.uk.

Additional information for United States residents

Privacy rights vary by state and depend on whether the relevant law applies to our business and the information concerned.

Where applicable, you may have rights to know about or access personal information, obtain a copy, correct inaccuracies, request deletion, and opt out of certain processing, such as sale, sharing for cross-context behavioural advertising, targeted advertising, or certain profiling.

Some laws also provide rights concerning sensitive information, authorised agents, appeals, and protection against unlawful discrimination for exercising privacy rights.

Rights and request procedures applicable to this business:

[APPLICABLE_US_STATE_RIGHTS_AND_PROCEDURES]

Our relevant data practices:

[US_SALE_SHARING_TARGETED_ADVERTISING_AND_SENSITIVE_DATA_DISCLOSURES]

Request methods:

[US_PRIVACY_REQUEST_METHODS]

Appeal procedure, where applicable:

[US_PRIVACY_APPEAL_PROCEDURE]

Additional state-specific disclosures:

[US_STATE_SPECIFIC_DISCLOSURES]

[CUSTOM_MARKET_SUPPLEMENT_HEADING]

[CUSTOM_MARKET_SUPPLEMENT_CONTENT]

Changes and contact

We may update this policy to reflect changes in the website or our practices. The date above identifies the latest revision.

For questions, contact [PRACTICE_EMAIL].