Privacy Policy
Last updated: 08/08/26
This policy explains what personal data Clinic Finder collects, why, and your rights over it. We are committed to handling your data responsibly and in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Clinic Finder is operated by Clinic Finder (“we”, “us”), the data controller for the personal data described here. Our registered office is Tewkesbury Business Park, 61 Oakfield Cl, Tewkesbury GL20 8SD. We are registered with the Information Commissioner’s Office (ICO) under registration number ICO registration number. For any privacy question, contact us via our contact form.
2. The data we collect
- Account email. When you sign in we use passwordless authentication (via Better Auth): you give your email address and we send a one-time code to verify it. We store your email address to maintain your account.
- Reviews you submit. Any rating, review text and related details you choose to post, together with the account they are linked to.
- Technical data from your requests. Standard information every website receives when your browser asks for a page, such as your IP address, browser and device type, used to serve the site and keep it secure.
- Aggregate usage statistics. We use Vercel Web Analytics to see how many people visit and which pages are useful. It is cookieless and stores nothing on your device: Vercel derives a short-lived, irreversible hash from your IP address and browser details so a repeat visit is not double-counted, and records only the page viewed, the site that referred you, and your country, browser and device type. It builds no profile of you and cannot follow you to other websites. We run no advertising or cross-site tracking here.
- Messages you send us. The contents of any email or enquiry you send.
We also display clinic information sourced from Google (including Google Places data and Google reviews). That content is provided by Google and its users; where it contains third parties’ personal data, Google is the source and its own terms and privacy policy apply.
3. How and why we use your data
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Create your account and sign you in with a one-time email code | Performance of a contract; our legitimate interests in securing accounts |
| Publish and moderate the reviews you submit | Our legitimate interests in running a useful directory; your consent where required |
| Send service emails (such as your sign-in code) | Performance of a contract |
| Serve the site and keep the sign-in session working | Performance of a contract; our legitimate interests |
| Keep the site secure and prevent misuse or fraud | Our legitimate interests |
| Measure aggregate use of the site with cookieless analytics | Our legitimate interests in understanding and improving the site |
| Respond to your enquiries | Our legitimate interests |
4. Cookies
Browsing this site sets no cookies. The only cookie we set is the strictly necessary session cookie created when you sign in. Our analytics is cookieless and we run no advertising or tracking cookies, so there is nothing to consent to and we show no consent banner. Our maps provider, Mapbox, stores its own service telemetry in your browser when an interactive map loads. See our Cookie Policy for the detail.
5. Who we share data with
We do not sell your personal data. We share it with service providers who process it on our behalf, only as needed to run the site:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting, infrastructure and cookieless usage analytics |
| Resend | Sending transactional email (including sign-in codes) |
| Cloudinary | Image hosting and delivery |
| Mapbox | Displaying interactive maps |
| Source of clinic listing, ratings and review data shown on the site |
We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer.
6. International transfers
Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum — to protect your data.
7. How long we keep it
We keep account data for as long as your account is active. Reviews remain published until you or we remove them. Aggregate analytics data is kept by Vercel for a limited period and holds no identifier we could link back to you. We delete or anonymise personal data when it is no longer needed.
8. Your rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing;
- data portability; and
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, contact us via our contact form. You also have the right to complain to the ICO (ico.org.uk), though we’d appreciate the chance to help first.
9. Security
We take reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The site is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The current version is always shown on this page, with the “last updated” date above.
12. Contact
For any privacy question or request, contact Clinic Finder via our contact form, or write to us at Tewkesbury Business Park, 61 Oakfield Cl, Tewkesbury GL20 8SD.