1. Who we are (controller)
The data controller for this website (vreldan.top) and for appointment requests submitted through it is:
Vreldan
Suite 2B, Colmore Chambers, 29 Colmore Row, Birmingham B3 2BX, England
General email: [email protected]
Privacy email: [email protected]
Phone: +44 121 405 2786
Vreldan is an independent private men’s health clinic. We are not the NHS.
2. Scope
This Privacy Policy explains how we process personal data when you visit vreldan.top, use Cookie Settings, or send an appointment request. It does not replace the clinical records policy that applies once you become a patient under a confirmed appointment; clinical notes created during a visit are handled under medical confidentiality and applicable UK health data rules.
3. Personal data we collect
3.1 Appointment request form
- Full name
- Phone number
- Selected consultation type and preferred time of day
- Optional free-text note
- Confirmation that you have read this Privacy Policy
We deliberately do not ask for payment card details, diagnoses, symptom scores, or age as mandatory fields on this form.
3.2 Website and cookies
Strictly necessary cookies (for example consent storage) are used to operate the site. Analytics and marketing cookies load only after you give consent via the cookie banner or Cookie Settings. See our Cookie Policy for the current cookie table.
3.3 Technical data
Server logs may include IP address, browser type, date/time and requested URL for security and troubleshooting. Consent logs store timestamp, policy version and cookie categories (with a hashed IP for integrity), not your form answers.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Respond to your appointment request and arrange a visit | Steps prior to a contract / contract (UK GDPR Art. 6(1)(b)); where needed, consent for the request checkbox (Art. 6(1)(a)) |
| Operate the website and keep it secure | Legitimate interests (Art. 6(1)(f)) — running a secure clinic website |
| Store and honour cookie preferences; enable analytics/marketing tools only if configured and consented | Consent (Art. 6(1)(a); PECR) for non-essential cookies |
| Comply with legal obligations (for example accounting or regulatory requests) | Legal obligation (Art. 6(1)(c)) |
| Respond to privacy rights requests | Legal obligation / legitimate interests |
Cookie consent is separate from consent to process appointment form data. Rejecting analytics/marketing cookies does not prevent you from sending a booking request.
5. Recipients
We may share data with:
- Clinic staff who schedule and deliver consultations
- IT / hosting providers that process data on our instructions
- Email or communications providers used to contact you about your request
- Analytics or advertising platforms only if those tools are configured on this site and you have consented to those categories
- Professional advisers or authorities where required by law
We do not sell your personal data.
6. International transfers
If a provider stores or accesses data outside the UK, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or an adequacy decision where available. Advertising and analytics tools (when consented) may involve transfers described in those providers’ policies. For Google’s use of data when advertising features are enabled, see Google Business Data Responsibility.
7. Retention
- Appointment requests: kept for up to 24 months after the last contact about that request, unless a longer period is needed for a confirmed booking, complaint or legal claim.
- Consent logs: kept for up to 24 months to demonstrate compliance.
- Server/security logs: typically up to 12 months.
- Cookie preferences: stored in your browser until you clear them or update Cookie Settings.
Clinical records created after you attend an appointment are retained according to applicable medical record retention standards, which may be longer.
8. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict or object to processing
- Data portability where processing is based on consent or contract and is automated
- Withdraw consent at any time (without affecting prior lawful processing)
To exercise these rights, email [email protected]. To withdraw cookie consent or change categories, use on this site.
9. Complaints
You may lodge a complaint with the UK supervisory authority: Information Commissioner’s Office (ICO) — https://ico.org.uk/. We encourage you to contact us first so we can try to resolve your concern.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects in relation to appointment requests on this website.
11. Children
This website is intended for adults seeking private men’s health consultations. We do not knowingly collect data from children through the appointment form.
12. Updates
We may update this Privacy Policy when our practices or legal requirements change. The “Last updated” date at the top will be revised accordingly.
13. Contact
Privacy enquiries: [email protected]
Clinic: [email protected] · +44 121 405 2786