Privacy Policy

Hosting and Security

This site is hosted on Cloudflare. Your IP address is processed by Cloudflare for security purposes: blocking bots, automated scanners, and the steady stream of overseas hackers prodding at every website on the internet. This is a legitimate interest under UK GDPR. IP addresses aren't meaningfully stored after the request is finished.

Cookies

Cloudflare sets one cookie called __cf_bm that lasts 30 minutes. It tells the security layer you're a human and not a bot. It doesn't follow you between sites or remember you between visits. The ICO classifies cookies of this kind as "strictly necessary", which is why this site doesn't have a consent banner.

That's the only cookie. I don't use tracking, marketing, or behavioural analytics cookies.

Analytics

This site uses Cloudflare Web Analytics to count page views and understand how visitors find us. Per Cloudflare's published statement, the analytics beacon does not use cookies, does not use localStorage, and does not track visitors across sites or over time. The data collected (pageviews, country, device type, referrer) is processed on my behalf by Cloudflare as a third-party service provider. See cloudflare.com/privacypolicy for their privacy practices.

I also count taps on the Call, Text and WhatsApp buttons and on the booking form, so I can tell whether the site is doing its job. A tap sends an empty request that says only which button it was and which page it was on. No cookie is set, nothing you type is sent, and I keep daily totals only.

Booking Form

When you submit a booking request, I receive your phone number, postcode, and preferred times. I use this to call you back and arrange your appointment. That's it.

Availability Chat

The Book Now section on the home page has a small chat that tells you roughly how busy I am and whether I cover your area. It's an AI assistant (Claude, made by Anthropic). It only knows what is already public on this site: which parts of each day are free, busy or closed. It can't see my diary in detail, my clients, or where I am, and it can't book anything. If you ask for a call back, it fills in the day and time on the booking form for you; nothing is sent until you add your number and send the form yourself. I confirm every booking myself.

What you type is sent to Anthropic, in the United States, to write the reply. Anthropic handles it on my behalf under its commercial terms and data processing agreement, which don't allow it to train its models on your messages. I keep each chat for 48 hours, then it deletes itself. I read them to find where the chat let you down: a question it couldn't answer, an answer it got wrong, something you wanted to know that it didn't tell you. Then I fix it, so the next person who asks gets a straight answer first time. I keep the words of the chat and nothing else: not your IP address, not your device, nothing that says who you are. If you type a phone number, email address or full postcode, the chat takes it out before the conversation is stored or sent anywhere. Please don't put health details in the chat. Tell me those when I call you back, or on the intake form.

To stop bots running up costs, the chat uses Cloudflare Turnstile, which checks your browser quietly in the background. How Cloudflare handles that check is set out in its Turnstile Privacy Addendum.

Client Records

If you become a client, I keep notes about your treatments and preferences so I can look after you properly. All client data is encrypted at rest and automatically deleted if there's been no contact for 2 years.

Your Data Is Not For Sale

Your data is not available for sale and never will be. I don't share it with anyone.

Back to homepage