Privacy Registry

Blog & Enquiry Processing

Public forms on our blog collect your name, email, optional phone number, the message you write, a consent timestamp with the policy version, and the article you were reading when you enquired. We use this information solely to respond to your health enquiries. The lawful basis is your captured consent. Enquiry messages are never written to application logs, error monitoring, or analytics — they are visible only to clinic staff.

Data Retention

Blog enquiries are retained for 24 months and then deleted automatically. Staff accounts are kept indefinitely for attribution and provenance of published medical content, with personal data erased on a valid request while post attribution is preserved. Published posts and media are retained while they remain public.

Analytics & Cookies

This site uses no analytics cookies, no tracking pixels, no profiling, and no advertising trackers. For this reason no cookie banner is shown. Only the session cookies required for staff sign-in exist, and they are never used for analytics.

Your Rights

Under the NDPA 2023 / NDPR you may request access to, correction of, or deletion of your personal data, and you may withdraw consent at any time. Submit a request to our Data Protection Officer and we will respond within 30 days with either a data export (your enquiries and account record) or a deletion (enquiry records erased, personal identifiers anonymised while published attribution is preserved).

Clinic-Care Information

Information you share as part of treatment at the physical clinic is processed under your treatment consent and applicable health-records law, separately from this website. Contact our Data Protection Officer for care-record requests.

Sub-processors Table