1. Data controller
Cleritas is the data controller for personal data collected through this website and in the course of providing our services. Contact for all data-protection matters: hello@cleritas.co.uk.
2. What we collect
We collect only what we need to run the business:
- Contact and enquiry forms: your name, email address, profession or role, and the content of your message.
- Waitlist sign-ups: your name, email address and, where you provide it, your specialty and clinic details, so we can send relevant event and launch information.
- Purchases and service engagements: billing details and correspondence needed to deliver templates and services. Card payments are handled by our payment processor; we do not store card numbers.
- Analytics: aggregated, low-granularity usage data about how visitors use the site (pages viewed, approximate location, device type), used to improve the site.
This website is aimed at healthcare professionals and businesses. We do not knowingly collect data from children, and we do not collect patient data through this site. If our services involve reviewing your clinical documentation, that work is governed by the data-processing terms in your service agreement.
3. Lawful bases
- Consent, for the waitlist and any marketing email. You can withdraw consent at any time using the unsubscribe link in every email or by contacting us.
- Contract, to deliver templates, events and services you have purchased, and to respond to enquiries you make before entering a contract.
- Legitimate interests, to operate and secure the website, analyse usage in aggregate, and keep records of business correspondence. We balance these interests against your rights and use the least intrusive means available.
- Legal obligation, to keep accounting and tax records for the periods required by law.
4. Who we share data with
We do not sell personal data, to anyone, for any purpose. We share it only with the processors who make the site and business work, each under a contract that restricts their use of your data to our instructions:
- Formspree, processes contact and waitlist form submissions;
- our website hosting provider, serves this site and its server logs;
- our analytics provider, processes aggregated usage data;
- our email and payment providers, deliver the emails you have asked for and process payments you make.
Where a processor stores data outside the UK, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement. We may also disclose data where the law requires it.
5. How long we keep it
- Enquiry correspondence: up to 2 years after the enquiry closes.
- Waitlist and marketing data: until you unsubscribe, or after a prolonged period of inactivity, whichever is sooner.
- Customer and service records: 6 years after the end of the engagement, in line with contractual limitation periods and tax requirements.
- Analytics data: held in aggregated form only.
6. Your rights
Under the UK GDPR you have the right to access the personal data we hold about you; to have inaccurate data corrected; to have data erased where there is no continuing reason to hold it; to restrict or object to processing, including an absolute right to object to direct marketing; and to data portability where processing is based on consent or contract. To exercise any of these rights, email hello@cleritas.co.uk. We will respond within one month.
7. Complaints
If you are unhappy with how we have handled your data, contact us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
8. Changes to this policy
We will update this page when our practices or processors change, and update the date at the top. Material changes affecting waitlist subscribers will be notified by email.
See also our terms of use.