Privacy policy

Who we are

Bonica Healthcare is operated by Bonica Healthcare Limited, a company registered in England and Wales. We are the data controller for personal data collected through this website.

We are in the process of registering with the Information Commissioner's Office (ICO). Our ICO registration number will be published here once confirmed. In the meantime, queries about data protection should be directed to info@bonicahealthcare.co.uk.

This policy applies to the website at www.bonicahealthcare.co.uk and any booking or enquiry forms hosted on it.

What data we collect and why

When you book an appointment or submit an enquiry

We collect your name, email address, telephone number, preferred clinic, service requested and any health information you provide in a free-text field. We use this to process your appointment request and contact you to confirm your booking.

Legal basis: Contract (processing necessary to fulfil your appointment request) and, where health data is involved, your explicit consent.

When you browse our website

We collect standard analytics data including pages visited, time on site, device type, browser, approximate location (country/region level) and referring source. This is collected via Google Analytics 4 (GA4). We do not collect your name or contact details through analytics.

Legal basis: Legitimate interests (understanding how our website is used to improve it), subject to your cookie preferences.

When you interact with our advertising

If you click on one of our advertisements on Google or Facebook, those platforms may set cookies that allow us to measure the effectiveness of our campaigns. We may receive aggregated, anonymised reports about ad performance. We do not receive your personal identity from these platforms without your consent.

Legal basis: Consent (via your cookie preferences).

When you contact us by email or phone

We retain records of email and telephone communications for the purpose of responding to your enquiry and for our legitimate business records.

Legal basis: Legitimate interests.

Special category data

Health information is classified as special category data under UK GDPR and receives additional protection. We only collect health information when you voluntarily provide it as part of a booking request, and we process it only with your explicit consent for the purpose of arranging your appointment. Clinical records created during your treatment are held separately under our clinical data retention policy.

How we store and protect your data

Enquiry and booking data is held in our CRM system, operated by HubSpot Inc. (a US-based company with EU-US Data Privacy Framework certification). Appointment and clinical booking data is processed through Zenoti Inc., our practice management system, which is SOC 2 Type II certified.

Both processors are bound by data processing agreements that require them to process your data only on our instructions and to maintain appropriate security measures. We do not sell your data to third parties.

We retain enquiry data for 24 months. Booking data is retained for 7 years in accordance with NHS and private practice clinical record-keeping guidance. You may request deletion of non-clinical data at any time.

Third-party processors

Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access, you may request a copy of the personal data we hold about you.
• Right to rectification, you may ask us to correct inaccurate data.
• Right to erasure, you may ask us to delete your personal data where we no longer have a lawful basis to hold it.
• Right to restriction, you may ask us to restrict processing of your data in certain circumstances.
• Right to data portability, you may request your data in a structured, machine-readable format.
• Right to object, you may object to processing based on legitimate interests or for direct marketing.
• Rights relating to automated decision-making, we do not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at info@bonicahealthcare.co.uk. We will respond within one calendar month.

Cookies

We use cookies on this website. For full details of the cookies we set and how to manage your preferences, please read our Cookie Policy.

Marketing communications

We will only send you marketing emails if you have opted in to receive them. You may unsubscribe at any time using the link in any marketing email or by contacting us at info@bonicahealthcare.co.uk.

Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would always appreciate the opportunity to address your concerns directly first.

Changes to this policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised. Significant changes will be communicated via a notice on our website.

Contact us

For any questions about this privacy policy or how we handle your data:

• Email: info@bonicahealthcare.co.uk
• Post: Data Protection, Bonica Healthcare Limited, company no. 16340909, 85 Great Portland Street, London W1W 7LT.