This page explains what we do with personal data collected through this website. We have kept it short and written it in plain English.
Who we are
This website is run by Diogo Maia, trading as EasyStartClinics. We help physiotherapy and MSK clinics bring back patients who have stopped booking.
For personal data collected through this website, we are the data controller. That means we decide what is collected and what happens to it.
You can reach us at diogo@easystartclinics.com.
What we collect and why
The contact form
The short form near the bottom of our home page asks for your name and your email address. We use them only to reply to you about your enquiry. There are no other fields, and we do not ask for anything further.
Booking a call
Calls are booked through Calendly, which is built into our home page and also linked from our confirmation page. When you book, Calendly asks for your name, your email address and, if you choose to give it, your phone number. We use these to set up the call, send you the invitation and any reminders, and speak to you at the agreed time.
If you email us, or we email you, we keep that correspondence so we have a record of what was discussed and can pick the conversation back up later.
Basic server records
Our host keeps standard technical logs, such as the IP address a request came from, so that the site stays online and secure. We do not use those logs to build a profile of you.
We collect nothing else here. There is no account to create, no newsletter sign-up and no payment taken on this site.
Cookies and tracking
We do not use analytics, advertising or tracking cookies on this website. There is no Google Analytics, no advertising pixel and no tracking script of any kind. That is why you will not see a cookie banner.
Some parts of the site load content from other companies, and those companies will see your IP address as a result. They are the Calendly booking widget, the video player files, and the fonts we use, which come from Google Fonts.
If you use the Calendly booking widget, Calendly may set its own cookies inside it. Those cookies belong to Calendly rather than to us, and are covered by Calendly's own privacy notice.
Our legal basis for using your data
Data protection law says we need a lawful reason to use your personal data. We rely on two.
Legitimate interests. When you contact us about your clinic or book a call, we use your details to reply and to hold that conversation. This is a normal part of running a business and we think you would expect it. It does not override your rights, and you can object at any time.
Consent. Where you have given us permission for something specific, we rely on that consent. You can withdraw it at any time by emailing us.
Who processes data for us
We use a small number of established suppliers. They handle your data only to provide their service to us, under contract.
- Netlify. Hosts this website and receives contact form submissions.
- Calendly. Runs call bookings and calendar invitations.
- Google Workspace. Our email.
Some of these providers store or process data outside the UK and the EEA, mainly in the United States. Where that happens, the transfer is covered by standard contractual clauses, which are the safeguards approved for this purpose under UK and EU law.
We do not sell your data, and we do not share it for advertising.
How long we keep it
We keep enquiries and correspondence only for as long as we need them for the business relationship. Once they are no longer needed, we delete them.
If you ask us to delete your details sooner, we will, unless we are required to keep something to meet a legal obligation.
Patient data belonging to client clinics
We never collect patient data through this website. Nothing on this site is meant for patient information, and you should not send any to us through the contact form.
When we handle patient data as part of the service we provide to a clinic, we act as a processor following that clinic's instructions, under a signed data processing agreement. The clinic stays the controller of that data.
If you are a patient with a question about your own records, please contact your clinic directly.
Your rights
Under UK GDPR and EU GDPR you have the right to:
- ask for a copy of the personal data we hold about you
- ask us to correct anything that is wrong or incomplete
- ask us to delete your data
- object to us using it, or ask us to limit how we use it
- ask for your data in a portable format
- withdraw your consent, where we relied on consent
To use any of these rights, email diogo@easystartclinics.com. We will reply within one month, and there is no charge.
Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right.
You can also complain to a regulator. In the UK that is the Information Commissioner's Office (ICO) at ico.org.uk. In Portugal it is the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt. If you are elsewhere in the EU, you can complain to your own national data protection authority.
Changes to this policy
If we change how we handle data, we will update this page and change the date at the top.