1. Who we are

This website and the services described on it are provided by Medzeus (“we”, “us” or “our”). For UK data protection purposes, the data controller is Medzeus.

Trading location: Middlewich, Cheshire.
Privacy contact: info@medzeus.co.uk · Telephone: 07415 352 489

We are committed to the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), as applicable.

2. Information we collect

Depending on how you interact with us, we may collect:

• Contact details: name, email address, telephone number and correspondence.
• Booking and service information: appointments, enquiries, purchases, course enrolments and payment or transaction details.
• Health information: information you choose to provide about your health, allergies, medication, treatment history or suitability. This is special category data and we only use it where a lawful condition under Article 9 UK GDPR applies.
• Technical information: IP address, browser/device details, pages viewed and approximate location derived from IP address.
• Marketing preferences: consent choices and records of communications sent to you.

We do not intentionally collect information from children. Please do not submit another person’s information unless you are authorised to do so.

3. How we use your information

Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can ask us for more information about that assessment.

4. When we share information

We may share information with trusted suppliers who help us operate, including Cliniko for appointment and client management, Google Analytics for website analytics where you have consented, a third-party payment service for processing transactions, website hosting and IT providers, professional advisers and delivery providers. They may only process information under our instructions and appropriate contractual safeguards.

We may also disclose information where required by law, to protect someone’s vital interests, or in connection with a business sale or restructure. We do not sell your personal information.

Some suppliers, including Google and other technology providers, may process information outside the UK. Where this happens, we use a lawful transfer mechanism such as UK adequacy regulations, adequacy decisions, the UK International Data Transfer Agreement or the UK Addendum, together with supplementary safeguards where needed.

5. Cookies and similar technologies

We use strictly necessary cookies to provide the website and remember essential settings. With your consent, we use Google Analytics cookies to understand how visitors use the site. Optional cookies should remain off until you choose to accept them.

You can change or withdraw your analytics consent through your browser settings or the cookie preference controls made available on the website. Browser controls can also block or delete cookies, although some site features may then not work correctly.

6. Retention and security

We keep information only for as long as it is needed for the purpose collected, to provide services, resolve disputes, meet professional, tax, accounting or other legal requirements, and establish or defend legal claims. Enquiry information is normally kept only as long as needed to deal with the enquiry and any reasonable follow-up. Booking and treatment records are kept for the period required by applicable professional and legal guidance. Financial records are kept for the period required by law. Marketing preference records are kept while relevant and so we can honour your choices.

We use appropriate technical and organisational measures, including access controls and secure providers. No online transmission or storage system can be guaranteed completely secure, so please avoid sending sensitive information through ordinary email unless we ask you to.

7. Your data protection rights

Subject to legal exceptions, you may ask us to:

• provide a copy of your personal information;
• correct inaccurate or incomplete information;
• erase information or restrict how we use it;
• provide information in a portable format;
• stop direct marketing; and
• review a decision made solely by automated means, where applicable.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before withdrawal. To exercise a right, contact us using the details below. We may need to verify your identity and normally respond within one month.