1. Who we are (controller)
The data controller is Ulmara, Suite 3, King Street Clinic Rooms, 48 King Street, Manchester M2 4WQ, England.
Privacy contact: [email protected]. General contact: [email protected] · +44 161 833 4190.
2. What data we collect
Visit request form
When you submit a request we collect: full name, telephone number, preferred consultation type, preferred time of day, optional free-text note, and confirmation that you have read this Privacy Policy. We do not ask for payment card details, diagnoses, symptom scores, or date of birth on this form.
Technical and cookie data
We store a consent record (categories chosen, timestamp, policy version) and may use analytics or marketing cookies only after you opt in. See our Cookie Policy.
Correspondence
If you email or call us, we process the contact details and content needed to respond.
3. Purposes and legal bases
- Responding to visit requests and arranging appointments — performance of steps prior to a contract / contract (UK GDPR Art. 6(1)(b)).
- Operating and securing the website — legitimate interests (Art. 6(1)(f)) in running a safe practice site.
- Recording cookie consent — legal obligation and accountability (Art. 6(1)(c) / Art. 7).
- Analytics cookies — consent (Art. 6(1)(a)), only if you enable Analytics.
- Marketing / advertising cookies — consent (Art. 6(1)(a)), only if you enable Marketing.
- Clinical records created after you become a patient — processed under applicable UK health data rules and, where relevant, Art. 9 conditions for health data; those records are handled in the practice systems, not through the public form fields listed above.
4. Recipients
We may share data with: hosting and IT providers who support ulmara.top under contract; payment processors when you pay at the practice (not via this website form); professional advisers; and authorities where required by law. Advertising or analytics providers receive cookie identifiers only if you consent to those categories.
5. International transfers
If a tool provider stores data outside the UK / EEA, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy decisions where available. Details for a specific tool are available on request at [email protected].
6. Retention
- Visit requests that do not become appointments: usually up to 12 months, then deleted or anonymised.
- Cookie consent logs: up to 24 months for accountability.
- Clinical records (if you attend): retained according to UK clinical record-keeping guidance applicable to private practice.
- Ordinary correspondence: typically up to 24 months unless a longer period is needed for legal claims.
7. Your rights
Under UK GDPR you may have the right to access, rectify, erase, restrict, object, and data portability, and to withdraw consent at any time where processing is based on consent. Withdrawal does not affect earlier lawful processing. To exercise rights, email [email protected].
You can change cookie choices at any time via .
8. Complaints
You may complain to the UK supervisory authority, the Information Commissioner’s Office (ICO): https://ico.org.uk/. We would appreciate the chance to resolve concerns first via [email protected].
9. Mandatory form fields and automated decisions
Name, phone, consultation choice, preferred time, and privacy confirmation are required to process a visit request. Optional notes are voluntary. We do not use automated decision-making or profiling that produces legal or similarly significant effects about you on this website.
10. Children
This site is aimed at adults arranging private consultations. We do not knowingly collect children’s data through the visit request form.
11. Google advertising and data use
When marketing or analytics partners are enabled with your consent, Google may process data as described in Google’s resources for business data responsibility: https://business.safety.google/privacy/.
12. Changes
We may update this Policy. The “Last updated” date will change when we do. Significant changes will be highlighted on this page where practical.