Privacy Policy
Last updated: 10/07/26
This policy explains what personal data Clinic Finder collects, why, and your rights over it. We are committed to handling your data responsibly and in line with UK data protection law (the UK GDPR and the Data Protection Act 2018).
1. Who we are
Clinic Finder is operated by Clinic Finder (“we”, “us”), the data controller for the personal data described here. Our registered office is Tewkesbury Business Park, 61 Oakfield Cl, Tewkesbury GL20 8SD. We are registered with the Information Commissioner’s Office (ICO) under registration number ICO registration number. For any privacy question, contact us at privacy@clinicfinder.co.uk.
2. The data we collect
- Account email. When you sign in we use passwordless authentication (via Better Auth): you give your email address and we send a one-time code to verify it. We store your email address to maintain your account.
- Reviews you submit. Any rating, review text and related details you choose to post, together with the account they are linked to.
- Usage and device data. Basic analytics and technical information (such as pages visited, approximate location, browser and device type) collected through cookies and similar technologies to keep the site working and understand how it is used.
- Messages you send us. The contents of any email or enquiry you send.
We also display clinic information sourced from Google (including Google Places data and Google reviews). That content is provided by Google and its users; where it contains third parties’ personal data, Google is the source and its own terms and privacy policy apply.
3. How and why we use your data
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Create your account and sign you in with a one-time email code | Performance of a contract; our legitimate interests in securing accounts |
| Publish and moderate the reviews you submit | Our legitimate interests in running a useful directory; your consent where required |
| Send service emails (such as your sign-in code) | Performance of a contract |
| Analytics and non-essential cookies | Your consent |
| Keep the site secure and prevent misuse or fraud | Our legitimate interests |
| Respond to your enquiries | Our legitimate interests |
4. Cookies
We use cookies and similar technologies for essential functions (such as keeping you signed in) and, with your consent, for analytics. See our Cookie Policy for details and how to manage your choices.
5. Who we share data with
We do not sell your personal data. We share it with service providers who process it on our behalf, only as needed to run the site:
| Provider | Purpose |
|---|---|
| Vercel | Website hosting and infrastructure |
| Resend | Sending transactional email (including sign-in codes) |
| Cloudinary | Image hosting and delivery |
| Mapbox | Displaying interactive maps |
| Source of clinic listing, ratings and review data shown on the site |
We may also disclose data where required by law, to enforce our terms, or in connection with a business transfer.
6. International transfers
Some of our providers process data outside the UK. Where that happens, we rely on appropriate safeguards recognised under UK data protection law — such as UK adequacy regulations or the International Data Transfer Agreement / Addendum — to protect your data.
7. How long we keep it
We keep account data for as long as your account is active. Reviews remain published until you or we remove them. Analytics data is retained for a limited period. We delete or anonymise personal data when it is no longer needed.
8. Your rights
Under UK GDPR you have the right to:
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict or object to processing;
- data portability; and
- withdraw consent at any time, where processing is based on consent.
To exercise any of these, email privacy@clinicfinder.co.uk. You also have the right to complain to the ICO (ico.org.uk), though we’d appreciate the chance to help first.
9. Security
We take reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children
The site is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 18.
11. Changes to this policy
We may update this policy from time to time. The current version is always shown on this page, with the “last updated” date above.
12. Contact
For any privacy question or request, contact Clinic Finder at privacy@clinicfinder.co.uk, Tewkesbury Business Park, 61 Oakfield Cl, Tewkesbury GL20 8SD.