Short version
We collect the details you choose to send us, mainly through the contact form or by email, and use them to reply to you and, if you go ahead, to plan your project. We do not use analytics, advertising or tracking cookies, and we do not sell or share your details for marketing. The contact page uses one strictly necessary cookie to protect the form. Please do not send us patient names or any health information.
What we collect
When you use the contact form
- Your name and email address.
- Your clinic's name, if you give it.
- The topic you choose and your message.
- Your confirmation that you have read this notice.
When you email us
Your email address, your name as it appears in your email, and anything you include in the message or attachments.
Protecting the form against abuse
To stop automated spam, the contact desk keeps two kinds of short record against a coded version of your connection's IP address: the time of each attempt that passes the form's checks, and the time of each message that is actually sent. A message that fails to send is not counted as sent. The code is created with a secret key and cannot practically be turned back into your IP address without that key. These records are deleted once they are more than 24 hours old; old records are cleared whenever the contact page is used.
Session data
When the contact form is shown or sent, your browser receives a session cookie (named clq_sid) that lets the server match the form to your visit and protect it against forged submissions. If the form needs correcting (for example a missing field or an expired page), the text you typed is held in that session briefly so you do not have to type it again; it is removed as soon as the form is shown back to you. If the form passes its checks but the mail server cannot send it, your text is shown straight back on the same page and is not kept in the session. The session also records the times of messages sent from it in the last ten minutes, to limit repeat sending. The session ends when you close your browser. See the cookie notice.
Server logs
Like most websites, our hosting provider keeps standard server logs, which can include IP addresses, the pages requested and the browser used. These are used to keep the site secure and working.
What we do not collect
We do not ask for health information and we do not need it. The planner on this site runs entirely in your browser; nothing you type into it is sent to us. We do not use analytics tools, advertising pixels or social media trackers.
Why we use your data, and our lawful basis
| Purpose | Data | Lawful basis |
|---|---|---|
| Replying to your enquiry | Contact form or email details | Legitimate interests: responding to people who contact us. If you are asking about a project, steps before entering a contract. |
| Planning and delivering a project | Details you provide during the project | Contract |
| Protecting the form and the website | Coded IP records, session cookie, server logs | Legitimate interests: keeping the site secure and free of spam |
| Keeping business records | Correspondence and invoices for clients | Legal obligation, for financial records |
Who sees your data
Your messages are delivered to our mailbox through our email and hosting providers, who process data on our behalf. We do not sell your data, and we do not share it with anyone for their own marketing. If you become a client, we may share project details with services we use to deliver the project, such as hosting, only as needed. We will tell you where your data is stored if you ask.
How long we keep it
- Enquiries that do not become projects: up to two years from our last contact, then deleted.
- Client project correspondence and records: for as long as the project and any ongoing care continue, and then for up to six years for financial and legal records.
- Form protection records: deleted after 24 hours, as described above.
- Session data: until the session ends.
Your rights
Under UK data protection law you can ask for a copy of your personal data, ask us to correct it, ask us to delete it, object to how we use it, ask us to restrict its use, and ask for data you provided to be transferred. The ICO's guidance explains the right to be informed and the other rights people have[1]. To use any of these rights, email hello@cliniquorix.site. We will respond within one month.
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office.
Security
The website uses HTTPS. The contact form is protected against forged submissions and automated spam, and its mail settings are stored outside the public part of the website. Access to our mailbox is limited and protected by strong passwords.
Changes to this notice
If we change how we handle personal data, we will update this notice and the date at the top of the page.
Sources
Checked on 29 October 2026.
- Information Commissioner's Office: The right to be informed (regulator)
