Privacy policy

Last updated: [date]

This policy explains what personal information Lizzie's Clear Ears collects, why, and what your rights are. We take looking after your information seriously.

Who we are

Lizzie's Clear Ears is run by [full name / legal business name], trading as Lizzie's Clear Ears, [business address]. For data protection purposes we are the "controller" of your information.

Contact us about anything in this policy at [email protected]. [ICO registration number, if registered with the Information Commissioner's Office]

What information we collect

Booking details: your name, email address, phone number, and the date and time of your appointment.
Health information: information you give us about your ears, symptoms, medical history, medication and anything else relevant to your treatment, and notes we make during your appointment. This is "special category" data and we treat it with extra care.
Payment details: that you paid, and how. [Confirm: we do not store full card numbers; card payments are handled by the payment provider.]
Messages: anything you send us by email, phone or text.
Website data: this website does not use cookies or tracking of its own (see below). Our hosting provider may keep basic technical logs, such as IP addresses, for security.

How and why we use it

To make, manage, confirm and remind you about appointments, because it is needed to provide the service you asked for.
To provide safe and appropriate care, and to keep appropriate treatment records. We use your health information for this purpose. [Confirm the lawful basis with your adviser; for health care by a professional bound by confidentiality this is usually "provision of health care" under UK GDPR Article 9(2)(h).]
To take payment and keep financial records, as the law requires.
To respond to your questions and complaints.
To protect our legal rights, and to keep our website secure.

We do not sell your information, and we do not use it for automated decision-making. [If you plan to send marketing emails or texts, say so here and explain how people can opt out. Do not send marketing without consent.]

Who we share it with

Only with people who need it to run the service:

Our online booking provider: [name of booking tool, e.g. Square Appointments / Cal.com], which stores your booking details and sends reminders.
Our website host and email forwarding provider: Cloudflare, which hosts this site and forwards emails sent to our address.
Our payment provider: [name, if applicable].
Your GP or another health professional: only if you ask us to, or if we think you need urgent care and you agree.
Others where the law requires it, for example to the police or a regulator.

Some of these providers are based outside the UK, for example in the United States. Where that happens, we rely on the safeguards the law allows, such as the UK's approved data transfer arrangements.

How long we keep it

We keep treatment records for [period, e.g. 8 years; confirm what applies to your profession and insurer], and financial records for the period tax law requires. After that we delete or anonymise them securely. Booking-tool data is kept for as long as our account holds it, and we remove it when no longer needed.

How we protect it

[Describe what actually happens, for example: records are kept on a password-protected device / in a locked cabinet; accounts use strong passwords and two-factor authentication.]

Cookies

This website does not set cookies of its own and does not use analytics or advertising trackers. If you choose light or dark mode, your browser remembers that choice on your own device using local storage. It is not sent to us or to anyone else. Our online booking page is provided by a third party, which may use cookies needed to make booking work. [Check your booking tool's cookie information, and if it sets non-essential cookies, add a cookie banner or choose settings that avoid them.]

Your rights

Under UK data protection law you have the right to:

ask for a copy of the information we hold about you;
ask us to correct anything that is wrong;
ask us to delete your information, in some circumstances (we may need to keep treatment records);
ask us to restrict how we use it, or object to certain uses;
ask for your information in a portable format, in some circumstances.

To use any of these rights, email [email protected]. We will usually reply within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.