Privacy Policy

1. Introduction

Earwax Clinic Burton ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect information about you when you use our website at earwaxclinicburton.co.uk or contact us to book an appointment.

We are the data controller for the personal data we process. If you have any questions about this policy or how we handle your data, please contact us using the details in Section 9.

2. Information We Collect

We may collect the following types of personal information:

• Contact information — your name, phone number and email address when you contact us to book an appointment or make an enquiry.
• Health information — relevant medical history or symptoms you share with us in connection with your appointment (this is special category data under UK GDPR).
• Appointment details — the date, time and type of appointment you book.
• Usage data — basic information about how you use our website, such as pages visited and browser type, collected via cookies or similar technologies.

3. How We Use Your Information

We use your personal data for the following purposes:

• To book and manage your appointments.
• To contact you regarding your appointment, including confirmations and reminders.
• To provide you with the earwax removal services you have requested.
• To respond to your enquiries.
• To comply with our legal and regulatory obligations as a healthcare provider.
• To improve our website and services.

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract — processing is necessary to provide the services you have requested.
• Legitimate interests — to manage our business and improve our services.
• Legal obligation — where we are required to process data to comply with the law.
• Explicit consent — for special category health data, we rely on your explicit consent given at the time of your appointment.

5. Sharing Your Information

We do not sell, rent or trade your personal data. We may share your information with:

• Our booking system provider (Setmore) to manage appointments — they act as a data processor on our behalf.
• Other healthcare professionals involved in your care, where necessary and with your consent.
• Regulatory or law enforcement bodies where required by law.

6. How Long We Keep Your Data

We retain patient records for a minimum of 8 years from the date of your last appointment, in line with NHS and professional healthcare guidance. Contact and enquiry data is kept for no longer than 2 years unless you become a patient.

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate data.
• Right to erasure — to request deletion of your data in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 9. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.