Privacy policy

Last updated: 20 August 2026

Introduction

The ClinicGo.co.uk platform respects your privacy and is committed to protecting your personal data, including sensitive health data. This privacy policy explains how the platform collects, uses, stores and protects your data when you use the website and its services.

This policy has been prepared in accordance with:

  • The UK General Data Protection Regulation (UK GDPR);
  • The Data Protection Act 2018;
  • The Privacy and Electronic Communications Regulations (PECR).

Data controller

Platform: ClinicGo.co.uk
Email: [email protected]

What data we collect

1. Ordinary personal data

Patients and website visitors:

  • First and last name
  • Email address
  • Phone number
  • City / place of residence
  • IP address and browser information
  • Cookie data

Healthcare providers and doctors:

  • Company / practice name and registration details
  • Contact details (address, phone, email)
  • Doctors' names and specialties
  • Professional qualifications and licences
  • Information about services provided and prices
  • Payment and tax data

2. Special category personal data (health data)

When booking a consultation or searching for healthcare services, the platform may process the following health data:

  • Information about the healthcare service you are seeking
  • A description of your health condition (if you provide one in the booking form)
  • Your browsing history on the platform
  • The specialties and doctors you selected

IMPORTANT: The platform does not require or store detailed medical records, diagnoses or treatment history. Such data is processed only by the healthcare providers you contact.

Legal basis for processing

The platform processes your personal data on the following legal bases:

Ordinary personal data:

  • Consent (UK GDPR Art. 6(1)(a)) - where you have given clear consent;
  • Performance of a contract (UK GDPR Art. 6(1)(b)) - booking a consultation;
  • Legitimate interest (UK GDPR Art. 6(1)(f)) - improving the platform, analytics;
  • Legal obligation (UK GDPR Art. 6(1)(c)) - accounting, taxes.

Special category data (health data):

  • Explicit consent (UK GDPR Art. 9(2)(a));
  • Necessity for the provision of healthcare (UK GDPR Art. 9(2)(h)).

By booking a consultation you explicitly consent to your health data being passed to the healthcare provider you selected for the purpose of coordinating your visit.

How the platform uses your data

Primary purposes:

  • Processing booking requests and passing them to healthcare providers
  • Communicating with you about consultations and services
  • Operating the platform and improving its services
  • Managing reviews and ratings
  • Customer support
  • Statistics and analytics (anonymised data)

Additional purposes (with your consent):

  • Sending newsletters and information about services
  • Personalised recommendations
  • Marketing communications

You can withdraw your consent to marketing communications at any time by emailing [email protected] or by clicking the "unsubscribe" link in any email you receive.

Data sharing and transfers

Data recipients:

1. Healthcare providers

When you book a consultation, your data (name, contact details, reason for booking) is passed to the clinic you selected. Each healthcare provider is an independent data controller and is responsible for processing your data under its own privacy policy.

2. Service providers

  • Hosting providers (servers in the UK/EU);
  • IT infrastructure maintenance services;
  • Payment processors (clinics only);
  • Analytics tools (e.g. Google Analytics);
  • Email delivery services.

3. Law enforcement authorities

Where required by law.

International data transfers

Your data is stored on servers located in the UK and the European Union. Where the platform uses services outside the UK/EU (e.g. Google Analytics), appropriate safeguards are applied (standard contractual clauses, adequacy decisions).

The platform does not sell or rent your personal data to third parties for commercial purposes.

Data retention periods

Booking requests: 12 months after the request
User accounts: while the account is active + 3 months after deletion
Review data: 5 years or until the user requests deletion
Clinic contract data: 10 years (accounting requirements)
Analytics data (anonymised): 26 months
Cookie data: 12 months

Once these periods expire, the data is deleted or anonymised.

Your rights

Under the UK GDPR you have the following rights:

1. Right of access

You can request confirmation of whether the platform processes your data and receive a copy of it.

2. Right to rectification

You can request that inaccurate or incomplete data be corrected.

3. Right to erasure ("right to be forgotten")

You can request that your data be deleted where:

  • The data is no longer needed for the purposes for which it was collected;
  • You withdraw your consent;
  • You object to the processing;
  • The data is being processed unlawfully.

4. Right to restrict processing

You can request that processing be temporarily suspended in certain cases.

5. Right to data portability

You can receive your data in a structured, commonly used format and transfer it to another data controller.

6. Right to object

You can object to processing based on legitimate interest or for direct marketing purposes.

7. Right to withdraw consent

Where processing is based on consent, you can withdraw it at any time.

8. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom
Phone: 0303 123 1113
Website: ico.org.uk

How to exercise your rights

To exercise any of your rights, contact: [email protected]

Please identify yourself (for security reasons) and describe your request. The platform will respond within 30 days of receiving your request.

Cookies

The platform's website uses cookies to improve browsing, functionality and analytics.

Types of cookies:

1. Necessary cookies

Ensure the basic operation of the website, session management and security. These cookies cannot be refused.

2. Functional cookies

Remember your choices (language, city) and improve the user experience.

3. Analytics cookies

Google Analytics (anonymised data) helps us understand how visitors use the website and improve it.

4. Marketing cookies

Used to display advertising and measure its effectiveness. Used only with your consent.

Managing cookies

You can manage cookies in the website's cookie settings or in your browser settings. If you refuse cookies, some website functionality may be lost.

Data security

Technical measures:

  • SSL/TLS encryption for all connections;
  • Secure servers in UK/EU data centres;
  • Firewalls and antivirus protection;
  • Regular security audits and updates;
  • Two-factor authentication for administrators;
  • Encrypted backups.

Organisational measures:

  • Access to data restricted to authorised staff;
  • Confidentiality agreements with staff;
  • Data protection training programme;
  • Incident management procedures.

Handling data breaches

In the event of a data breach posing a risk to your rights:

  • The platform will notify the Information Commissioner's Office within 72 hours;
  • The platform will inform you within 72 hours if the risk is high;
  • The platform will take measures to contain the breach.

Children's data

The platform's services are not intended for persons under 16 without the consent of a parent or legal guardian. If the platform learns that it has collected a minor's data without parental consent, it will take steps to delete it.

Automated decision-making and profiling

The platform does not carry out automated decision-making or profiling that would have a legal or similarly significant effect on you.

The platform may use basic analytics for recommendations (e.g. showing the nearest clinics based on your city), but this does not materially affect your rights.

Changes to this privacy policy

The platform may update this privacy policy. Registered users will be informed of material changes by email (no later than 30 days before they take effect) or by a notice on the website.

We recommend reviewing this page regularly.

Contact

If you have questions about this privacy policy or wish to exercise your rights:

Email: [email protected]

The platform will respond to your enquiries within 30 days.