Privacy Policy
Version
1.2
Jan 28, 2024
CureLink Limited ("CureLink", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you interact with our website, products, services, and communications. This applies to both individual (B2C) users and institutional (B2B) clients in accordance with UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
1. Who We Are
CureLink Ltd is a UK-based healthcare technology company providing lead generation, referral, and matching services for private healthcare providers and patients. We are registered as a data controller with the Information Commissioner’s Office (ICO).
2. What Information We Collect
We collect and process the following categories of personal data:
Personal Identification Information: Full name, date of birth, phone number, email, address, postcode.
Health Information: Symptoms, diagnoses, medications (as voluntarily submitted by users).
Usage Data: IP address, browser type, pages visited, time spent on pages, and other analytics.
Payment Details (B2B): Business names, addresses, payment method, billing contact.
Professional Details (B2B): Company information, specialties, qualifications, CQC registration numbers.
3. How We Collect Data
We collect data via:
Forms submitted on our website (e.g., contact, booking, registration forms)
Communications by email or phone
Web cookies and tracking technologies
Third-party integrations (e.g., booking systems, email marketing platforms)
4. Lawful Basis for Processing
We process personal data under the following legal bases:
Consent: For direct marketing and health service requests
Contractual necessity: For fulfilling bookings or referral arrangements
Legal obligation: To comply with UK health, employment, or tax regulations
Legitimate interests: For internal analytics, fraud prevention, service improvement
5. How We Use Personal Data
To connect users with appropriate private healthcare providers
To enable clinics to receive vetted patient leads
To provide customer support and respond to inquiries
To send marketing communications (with consent)
To monitor and improve our services
To fulfil our legal and compliance obligations
6. Sharing of Data
We may share data with:
Partner clinics or specialists to whom you request to be referred
Our technology partners (e.g., cloud hosting, payment processors)
Government authorities, regulators, or law enforcement (if legally required)
External advisors (legal, compliance, insurance)
We never sell personal data.
8. International Transfers
Where CureLink or its sub-processors transfer data outside the UK, we ensure adequate safeguards (e.g., Standard Contractual Clauses or adequacy decisions).
9. Your Rights (UK GDPR)
You have the right to:
Access your data
Correct inaccurate data
Request deletion ("right to be forgotten")
Object to processing
Restrict processing
Withdraw consent
Data portability (where applicable)
Lodge a complaint with the ICO (www.ico.org.uk)
To exercise your rights, email: privacy@curelink.co.uk
10. Cookies and Tracking
Our site uses cookies to personalize user experience, analyse traffic, and provide social media features. You can manage your cookie preferences via your browser or our cookie banner.
11. Data Security
We implement technical and organizational measures to protect your data, including:
Encryption
Role-based access controls
Secure data storage
Staff training
12. Children’s Data
Our services are not directed to individuals under 16 without parental consent. We do not knowingly process data of minors unless expressly required for a clinical referral.
13. Changes to This Policy
We may revise this Privacy Policy from time to time. Updates will be posted on this page with a revised "Effective Date".
13. Contact Us
For questions, concerns, or to exercise your rights:
Email: privacy@curelink.co.uk
Postal Address: CureLink Ltd, [Insert registered office address]
ICO Registration No: [Insert ICO number]