Privacy notice
This notice explains what personal information Hilltop Foot Care collects when you use this website or book an appointment, why we collect it, and your rights over it.
Draft for review. Items in square brackets need confirming before the site goes live.
Who we are
Hilltop Foot Care is run by Julie Ford, foot health practitioner, at 120 Coventry Road, Nuneaton CV10 7AD. We are the data controller for the information described here. You can contact us at julie@hilltopfootcare.co.uk or on 024 7666 0000. [ICO registration number, if registered.]
What we collect and why
When you book online
We collect your name, email address, phone number, the treatment you choose, your appointment time, and anything you write in the notes box. We use this to reserve your appointment, send you a confirmation, remind you of the appointment, and contact you if we need to change it. Because the treatment you choose can say something about your health, we treat this as special category data and rely on your explicit consent, given when you place the booking, together with the provision of health care as our lawful basis.
When you pay online
Payments are taken by Stripe. Your card details go directly to Stripe and never reach our systems; we receive only confirmation that the payment succeeded and a payment reference. Stripe’s own privacy notice explains how it handles your data.
When you contact us
We keep the details you give us for as long as needed to deal with your enquiry.
Clinical records
Notes about your treatment are kept by Julie Ford as part of your clinical record, separately from this website, in line with professional requirements. [Confirm how and where clinical records are kept.]
Who we share it with
We do not sell or share your information for marketing. To run the booking system we use trusted service providers who process data on our behalf: Supabase (secure database and login), Vercel (website hosting), Stripe (payments), and Namecheap (email). Our website is built and maintained by Black Flame Digital, who may access booking data only to keep the system working. Where a provider stores data outside the UK, appropriate safeguards under UK data protection law are in place.
How long we keep it
Booking records are kept for [24 months] after your appointment, then deleted. Clinical records are kept for the period required by our professional body [confirm]. Payment records are kept for six years for tax purposes.
Cookies
This site does not use advertising or analytics cookies. Stripe and Google Maps may set cookies needed for payments and the map to work.
Your rights
You can ask to see the information we hold about you, have it corrected or deleted, object to how we use it, or withdraw consent at any time by contacting us. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office at ico.org.uk.
Last updated: [date of launch].