Privacy policy

This policy explains what personal data we collect when you use this website or contact us, why we collect it, and the rights you have over it. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The NHS registration data shown on this site is public and aggregate. It comes from NHS England's published figures and contains no patient-level or personal data. The only personal data we handle is the contact details you give us when you ask us to look at your practice or book a call.

Who we are

Patient Growth is a service of Cardboard Creative Ltd, the data controller for the personal data described here. You can reach us athello@cardboardcreative.co.uk.

Cardboard Creative Ltd is a company registered in England and Wales (company number 12039844), with its registered office at 63 The Causeway, Potters Bar, EN6 5HF. We have applied to register as a data controller with the Information Commissioner's Office (ICO); our registration number will be published here once it is issued.

What we collect, and why

When you submit the "look up your practice" form or a booking enquiry, we collect:

• your name and role at the practice;
• your practice name and ODS code;
• your work email address.

We use this to respond to your enquiry, prepare the list-growth analysis you asked for, and, if you agree, to follow up about our service. We do not sell your data, and we do not use it for automated decision-making or profiling.

Our lawful basis

We rely on your consent (UK GDPR Article 6(1)(a)), given when you tick the box and submit the form, to contact you about your enquiry and our service. You can withdraw consent at any time (see "Your rights" below); withdrawing it does not affect anything we did lawfully beforehand.

How long we keep it

We keep enquiry data for 12 months from your last contact with us, after which we delete it, unless you have become a client (in which case our client records are governed by our engagement terms).

Who we share it with

We share your data only with the service providers that help us run our business, acting as our processors under contract: MailerSend, which delivers our emails, and Hostinger, which hosts our site and database in the United Kingdom. We do not transfer your data outside the UK or European Economic Area without appropriate safeguards, and we never sell it.

Cookies and tracking

This site sets no cookies. None at all: no advertising, no analytics, no third-party trackers. Fonts and every other asset load from our own domain, so opening a page calls no outside service and leaves nothing on your device. Because we set no non-essential cookies, there is nothing here for you to consent to and no banner to click away. If that ever changes, we will update this policy and ask first.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you (access);
• have inaccurate data corrected (rectification);
• ask us to delete your data (erasure);
• restrict or object to how we use it;
• ask for your data in a portable format;
• withdraw your consent at any time.

To exercise any of these, emailhello@cardboardcreative.co.uk. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed.