Privacy & Cookies Policy

1. Who we are

ClariDay (“we”, “us” or “our”) is the data controller under UK and EU data protection law, including the General Data Protection Regulation (GDPR) 2016/679. This means we are responsible for determining how your personal information is processed and safeguarded.

2. Personal data we collect

We may collect personal information that includes, but is not limited to:

• Name, contact details and address
• Date of birth and identity verification information
• Medical history and treatment information
• Gender and location information
• Payment and billing details
• Account, order and purchase history
• Responses to surveys, promotions or online forms
• Website usage data (collected via cookies or similar technology)

Sensitive information, such as health details, is collected only with your explicit consent and is required for providing medical advice, treatment or purchasing medication.

3. How we collect your data

• Directly from you through website forms, emails, phone calls or consultations
• From third-party sources with your consent (e.g. your GP or other healthcare providers)
• Through cookies and website tracking tools
• From financial or credit reference agencies for identity verification and fraud prevention

4. Why we use your data

• Delivering and managing healthcare services and treatment
• Verifying your identity and fulfilling contractual obligations
• Regulatory compliance and record-keeping
• Preventing fraud or unlawful activity
• Improving our services and maintaining operational efficiency
• Sending updates or promotional material (with your consent where required)

We only process your data where we have a legal basis, such as your consent, legitimate interests, contractual obligations or regulatory requirements.

5. Sharing your data

• Partner healthcare providers and pharmacies
• Payment processors, delivery companies or IT service providers
• Regulatory or law enforcement bodies as required by law
• Accredited auditors or professional advisors
• Potential buyers or business partners in case of corporate changes

All third parties are contractually obliged to protect your information and use it only for the intended purposes.

6. Data retention

We retain your personal information only for as long as necessary to:

• Deliver our services to you
• Meet legal and regulatory requirements
• Resolve complaints or inquiries

Sensitive medical information is retained according to Department of Health guidelines.

7. Security measures

• Secure servers and encrypted payment processing
• Restricted access to personal information
• Regular system testing and monitoring

While we take every precaution, internet-based communication cannot be guaranteed as fully secure.

8. Your rights

Under GDPR, you have the right to:

• Access and correct your data
• Request deletion or restriction of processing
• Object to marketing communications
• Request data portability
• Not be subject to automated decision-making

To exercise your rights, contact our Data Protection Officer using the details below. Proof of identity will be required.

9. Cookies

Our website uses cookies to enhance your experience, track website usage and personalise content. You can manage your cookie preferences in your browser settings.

10. Changes to this policy

We may update this Privacy Policy from time to time. Please review it periodically to stay informed of any changes.

11. Contact us

For questions, complaints or to exercise your data rights, contact ClariDay at 10 Harley Street, London W1G 9PF, or email contact@claridayclinic.co.uk.