Privacy Policy for MHB Clinic.

Welcome to MHB Clinic (mhbclinic.co.uk). We are committed to respecting and protecting the privacy of our clients. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We collect personal information when you fill out forms on our website or on platforms such as Facebook, Instagram, TikTok, and Google. The types of information we may collect include your name, contact details, treatment interest, and any message you choose to provide. This information is used to:

• Contact you regarding your inquiries.
• Provide you with information about our services and offers.
• Schedule appointments and provide customer service.

Legal basis: We process enquiry and appointment data because it is necessary to respond to your request and, where relevant, to take steps before entering into a contract for treatment. Where we send marketing communications, we will do so only where permitted by law and with your consent where required.

When you accept analytics cookies (see section 4), we also collect limited technical and usage information about how you use our website through Google Analytics. That data is collected in aggregated form and does not include the personal details you submit in our forms unless you have separately provided them to us.

Prior to undergoing any treatment at our clinic, you will be asked to complete a consent form. This form is essential for ensuring that you are fully informed about the treatment you will receive and that you give your explicit permission for the treatment.

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies in line with UK data protection and electronic communications law (UK GDPR and PECR).

Essential cookies

These are necessary for the website to function, for example to remember your cookie preference. Essential cookies do not require your consent and cannot be switched off through our cookie banner.

Analytics cookies

With your permission, we use Google Analytics 4 (provided by Google Ireland Limited and/or Google LLC) to understand how visitors use our website and to improve our content and services. Analytics cookies are not placed unless you choose Accept all on our cookie banner.

When analytics cookies are active, Google Analytics may collect:

• Pages viewed and links clicked (including consultation and phone links).
• Approximate geographic location (derived from IP address).
• Device and browser type, screen size, and operating system.
• Referral source (for example, search engine or referring website).
• Date, time, and duration of visits.
• Form interaction events in aggregated form (for example, that a consultation form was submitted, not the contents of the form).

We configure Google Analytics with IP anonymisation and Google Consent Mode, so analytics storage remains denied until you accept cookies. We do not use Google Analytics to identify you personally from website usage alone.

Google processes this data on our behalf as a processor/service provider. Google's privacy information is available at policies.google.com/privacy. You can read how Google uses data from sites that use its services at policies.google.com/technologies/partner-sites.

Marketing and advertising cookies

We do not currently use marketing, retargeting, or advertising cookies on this website. If that changes, we will update this policy and ask for your consent where required before such cookies are used.

Managing your cookie choice

When you first visit the site, you can choose Accept all or Essential only. You can change your choice at any time using Cookie settings in the site footer, which will show the cookie banner again. Withdrawing consent stops new analytics cookies from being set; you may need to clear existing cookies in your browser settings to remove ones already stored.

Legal basis for analytics cookies: your consent. You may withdraw consent at any time as described above.

We respect your privacy and do not sell your personal information. We may share information only where necessary and as described below.

• Google (Google Analytics 4): when you accept analytics cookies, usage data is shared with Google to provide website analytics. Google acts as our processor in providing this service.
• Service providers: trusted partners who help us operate our website, respond to enquiries, or run our clinic (for example, hosting, email, or appointment systems), under confidentiality obligations.
• Legal requirements: where required by law, regulation, court order, or to protect our rights, clients, or staff.

We use Google Search Console to monitor how our site appears in Google Search. Search Console does not place analytics cookies on visitors to our website; we verify ownership of the site using a meta tag in the page code.

Some of our service providers, including Google, may process or store information outside the United Kingdom. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as UK adequacy regulations, standard contractual clauses, or equivalent protections required under UK GDPR.

We keep personal information only for as long as needed for the purposes described in this policy, including legal, accounting, or reporting requirements.

• Enquiry and contact form data: typically up to 24 months after your last contact with us, unless a longer period is needed for ongoing care, complaints, or legal obligations.
• Cookie consent preference: stored locally in your browser until you clear site data or change your choice.
• Google Analytics data: retained according to our Google Analytics settings and Google’s own retention policies (you can review retention in your Google Analytics account settings).

We implement a variety of security measures to maintain the safety of your personal information. Our website is scanned on a regular basis for security holes and known vulnerabilities to make your visit to our site as safe as possible.

Under UK data protection law, you have rights in relation to your personal information, including the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Object to or restrict processing in certain circumstances.
• Withdraw consent at any time where we rely on consent (for example, analytics cookies), without affecting the lawfulness of processing before withdrawal.
• Request data portability where applicable.

To exercise any of these rights, contact us at info@mhbclinic.co.uk. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint.

We may update this privacy policy from time to time in order to reflect changes in our practices or for other operational, legal, or regulatory reasons.

If you have any questions about this Privacy Policy, please contact us at info@mhbclinic.co.uk.