1. Controller
The data controller is Rivaelis
Address: Floor 3, Colmore Practice Rooms, 28 Colmore Row, Birmingham B3 2AP, England
Privacy email: [email protected]
General email: [email protected]
Phone: +44 121 496 0834
2. Scope
This Policy applies to visitors of rivaelis.top and people who submit a booking request through the website. Clinical records created during an in-person visit may be governed by additional medical confidentiality rules; this notice focuses on website and enquiry data.
3. Personal data we collect
Booking request form
- Full name
- Phone number
- Preferred consultation type
- Preferred time of day
- Optional message / practical comments
- Privacy consent record
We do not ask for payment card details, full medical history, diagnoses, or symptom questionnaires through this form.
Technical and consent data
- IP address and basic device/browser information (server logs)
- Cookie consent choices, timestamp, and policy version
- Cookies and similar technologies as described in our Cookie Policy
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to booking requests and arranging appointments | Steps prior to a contract / contract performance; where required, consent for the enquiry form |
| Operating and securing the website | Legitimate interests (site security and reliability) |
| Recording and honouring cookie preferences | Legal obligation / consent (for non-essential cookies) |
| Analytics (only if you accept Analytics cookies) | Consent |
| Advertising measurement (only if you accept Marketing cookies) | Consent |
| Responding to privacy rights requests | Legal obligation |
Where Google advertising or measurement tools are used with your consent, Google may process data as described in Google’s Business Data Responsibility resources.
5. Recipients
We may share data with:
- Hosting and IT service providers who support this website under confidentiality obligations
- Email or communications tools used to reply to your enquiry
- Analytics or advertising partners — only if you grant Analytics / Marketing consent
- Professional advisers or authorities where required by law
6. International transfers
Some providers (for example analytics or advertising platforms) may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses, and we only enable those tools after consent where consent is required.
7. Retention
- Booking requests: up to 24 months after the last related contact, unless a longer period is needed for a complaint or legal claim
- Cookie consent logs: up to 24 months
- Server security logs: typically up to 12 months
- Clinical records from attended visits: retained according to applicable UK medical record practices and separate patient notices where provided
8. Your rights
Under UK GDPR you may have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain circumstances
- Restrict or object to processing
- Data portability (where applicable)
- Withdraw consent at any time (without affecting prior lawful processing)
To exercise these rights, email [email protected]. You can also change cookie choices at any time via .
9. Complaints
You can lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/. We would appreciate the chance to address your concern first.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects about you on this website.
11. Children
This website and booking form are intended for adults arranging private consultations. We do not knowingly collect children’s data through the online form.
12. Updates
We may update this Policy when our practices or legal requirements change. The “Last updated” date at the top will be revised accordingly.