In this policy, ‘we’, ‘us’ and ‘our’ refers to Peak Health Clinics. For more information, see About Us.

Our website address is: www.peakhealthclinics.co.uk

We are committed to safeguarding the privacy of our website visitors and clients.

This policy applies where we are acting as a data controller for the personal data of our website visitors and clients; in other words, where we determine the purposes and methods of processing your personal data.

The data is collected from you during the engagement process.

We may process data:

• • about your use of our website and services (usage data)
  • about your use of our services (service data)
  • about your client account including your name and email address (account data)
  • provided by you asking us to send you specific email information or newsletters (notification data)
  • provided by you for communicating with you (correspondence data)
  • provided by you to obtain goods and/or services from us (enquiry data and transaction data)
  • provided by you for publication on our website (publication data)
  • provided by another data supplier about you, for communicating with you about our services (marketing data)

This is how your personal information is created, and how we use it:

• • Usage data – the source of our usage data is Google Analytics. We use it to administer our website and business
  • Service data – is created by using our services. We use it to supply you services purchased through our website
  • Account data – is created by using and maintaining your account. We use it to provide our services, communicate with you, ensure our business security and maintain our database back-ups
  • Correspondence data – is created through our record-keeping and communications with you. We use it to send you non-marketing commercial communications and keep our records
  • Enquiry data – is created by our website contact forms and information you have submitted to us. We use it to offer, market and sell relevant goods and/or services to you.
  • Transaction data – is created by processing and keeping proper records of our transactions with you. We use it to supply goods and services to you, send statements, invoices and payment reminders to you
  • Publication data – is created from submissions made to our website and services. We use it to operate and publish material through our website and services
  • Notification data – is created by our website contact forms and information you have submitted to us. We use it to send you email notifications or newsletters that you have specifically requested.

This data may include:

• • your IP address
  • geographical location
  • browser type and version
  • operating system
  • referral source
  • length of visit
  • page views
  • website navigation paths
  • as well as information about the timing, frequency and pattern of your service use.

This data may include:

• • your name
  • contact details
  • email address
  • medical information

This data may include:

• • your name
  • bank account details
  • purchase information.

We use your personal data for processing based on the following legal bases:

Contract Obligations
This means that in order to establish and determine the basis of the provision of the services it is necessary to collect personal data. We keep and use the following data on that basis:

• • Account data
  • Service data

Your consent
This means you have given your permission for us to use your data for the purpose of using Non-necessary Cookies. We keep and use the following data on that basis:

• • Usage data
  • Enquiry data
  • Publication data
  • Notification data
  • Correspondence data

We also legitimately keep and use the following data because you have previously given your permission to a data provider:

• • Marketing data

Legal Obligations and Public Interest
We may keep and use any of your personal data identified in this policy for the following purposes:

• • to establish, exercise, or defend legal claims, whether in court proceedings or in an out-of-court procedure, so we can protect and assert our legal rights, your legal rights and the legal rights of others
  • in the interests of public safety.

Please do not supply any other person’s personal data to us, unless we request you to do so.

Our Company
We may share your personal data with any part of our company, providing the purpose for sharing your data is reasonable, necessary, and within the legal limits of this policy.

Our Suppliers
Providing the purpose for sharing your data is reasonable, and necessary, we may share your personal data with our current suppliers, software providers, or subcontractors (shown below), so we can enter into and/or deliver the contract between you and us:

• Google
• WordPress

We may transfer your personal data outside of the United Kingdom (UK) to enter into and/or deliver our contract to you, as follows:

Hosting facilities
Some of our suppliers and providers operate services hosted in the United States (US) including:

• • marketing software associated with the delivery of our website
  • software providers
  • data storage providers.

The US has implemented Privacy Shields and the Information Commissioner’s Office has ruled this to be adequate with respect to the data protection laws of these countries and therefore data transfer is permitted.

Worldwide publication
Personal data submitted for publication through our website or services may be available, via the internet, around the world. You acknowledge we cannot prevent the use (or misuse) of this type of personal data by others.

We will not keep personal data for longer than necessary.

How long do we retain data
We will keep your personal data as follows:

• • all personal data will be retained for a minimum of 6 years after data collection
  • and for a maximum of 7 years following conclusion of any contract between you and us.

We may keep your personal data when we are required to comply with a legal obligation which we are subject to.

We will not keep personal data for longer than necessary.

How long do we retain data
We will keep your personal data as follows:

• • all personal data will be retained for a minimum of 6 years after data collection
  • and for a maximum of 7 years following conclusion of any contract between you and us.

We may keep your personal data when we are required to comply with a legal obligation which we are subject to.