Privacy Policy

Privacy Policy

Last updated: March 24, 2025

This Privacy Policy describes how CliniciansCheck ("we", "us", or "our") collects, uses, shares, and protects your personal information when you visit or interact with https://clinicianscheck.com (the "Site") or use our associated services (the "Services"). We are committed to safeguarding your data and upholding the highest standards of data protection across all jurisdictions in which we operate.

1. Changes to This Privacy Policy

We may update this Privacy Policy as necessary to reflect changes in the law, our operations, or data processing practices. We will notify users of material changes, and where legally required, seek renewed consent.

2. Personal Data We Collect

We collect personal data either directly from you, automatically through your device, or from trusted third parties.

A. Information You Provide

  • Name, contact details (email, address, phone number)
  • Account registration and authentication credentials
  • Booking, payment, and order history
  • User-generated content, reviews, referrals, and survey responses
  • Health-related preferences where applicable (not health records)

B. Automatically Collected Information

  • Device and browser details, IP address, geolocation
  • Session information, click behavior, and website navigation patterns
  • Analytics data (via cookies, tags, and SDKs)

C. Third-Party Sources

  • Shopify, Stripe, and integrated payment or CRM systems
  • Advertising platforms and social networks (with user consent)

3. Legal Grounds for Processing

We process personal data under the following legal bases:

  • Performance of a contract (e.g., purchases, services)
  • Consent (e.g., marketing, non-essential cookies)
  • Legal obligation (e.g., financial or regulatory compliance)
  • Legitimate interest (e.g., fraud detection, service improvement)

We ensure transparency and minimal data collection aligned with local laws including the UK GDPR, EU GDPR, CCPA, and Australia’s Privacy Act.

4. How We Use Your Information

  • To register and manage accounts
  • To process orders and payment transactions securely
  • To provide access to tools, profiles, and marketplace features
  • To communicate with you and deliver support
  • To personalise and improve user experience
  • To comply with legal and regulatory requirements

5. Cookies & Tracking Technologies

Cookies and tracking tools help us:

  • Enable secure user sessions
  • Measure traffic and engagement via Google Analytics
  • Enhance navigation and usability
  • Deliver tailored ads (only with consent)

You can manage cookie settings via our cookie banner or browser preferences. We honour Do Not Track and Global Privacy Control signals where applicable.

For more detail: Shopify Cookie Policy

6. How We Share Your Data

We only share data when necessary and with proper protections in place:

  • Service providers: Shopify, CRM platforms, marketing tools
  • Payment processors: Stripe, PayPal (PCI-DSS compliant)
  • Legal authorities: if required by law or for protection
  • Business partners or affiliates: under contract and only with legitimate interest or consent

We do not sell personal data. If our practices change, we will notify users and allow opt-out.

7. Global Data Transfers

Data may be stored or processed outside your home country. We apply appropriate safeguards including:

  • EU adequacy decisions
  • Standard Contractual Clauses (SCCs)
  • UK International Data Transfer Agreements (IDTAs)
  • Continuous monitoring of vendor compliance

8. Data Retention

We retain personal data:

  • As long as accounts remain active or as necessary to provide services
  • In accordance with legal, regulatory, and tax requirements (up to 6–7 years)
  • Until consent is withdrawn (for marketing or profiling purposes)

Data is deleted or anonymised once no longer necessary.

9. Data Security

We adopt a layered security approach based on industry best practices:

  • SSL/TLS encryption on all data transmissions
  • Two-factor authentication and strict user access controls
  • Real-time threat monitoring and intrusion detection systems
  • Shopify’s PCI-DSS Level 1 compliant hosting environment
  • Secure data backup (via apps like Rewind)
  • Monthly platform security reviews and annual penetration testing

All staff are trained in secure data handling, and data is stored in secure, access-controlled environments.

10. Your Data Rights

You may request to:

  • Access your data
  • Correct inaccurate information
  • Delete your information
  • Object to or restrict certain processing
  • Withdraw consent at any time
  • Request data portability
  • Lodge a complaint with your national authority

To submit a request, email operationsteam@clinicianscheck.com. We respond within required timeframes and may request identity verification.

11. California Consumer Privacy Act (CCPA) Rights

California residents have the right to:

  • Know what personal data is collected and how it is used
  • Access, delete, or request copies of their data
  • Opt-out of data sale or sharing
  • Receive equal service without discrimination

We do not sell personal information. You may exercise your rights via: Do Not Sell or Share My Personal Information or contact us directly.

12. Children’s Data

Our platform is not intended for children under 16. We do not knowingly collect data from minors. If discovered, data will be immediately deleted.

13. External Services & Third-Party Links

Our Site may link to other platforms. We are not responsible for their privacy practices. Please review the third-party policies before submitting your data.

14. Contact Details

Data Controller: Mandy King
Email: operationsteam@clinicianscheck.com
Address: 2 Harley Street, London, W1G 9PA, United Kingdom

You may also contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk.

We are committed to maintaining the highest standards of privacy, confidentiality, and transparency for patients, clinicians, and partners worldwide.

For additional information, visit our Do Not Sell or Share My Personal Information page.

✅ Trust & Protection Summary

Security & Compliance Features What This Means for You
🔒 End-to-End Encryption (SSL/TLS) Data is encrypted at all times during transmission
🧠 GDPR, CCPA & Global Compliance Legal protection under the strongest global privacy laws
🛡️ Secure Shopify Infrastructure Hosted on a platform meeting enterprise-grade security certifications
🔐 Access Controls & 2FA Only authorised personnel can access your data
💳 PCI-Compliant Payments Financial transactions are processed via certified systems like Stripe & PayPal
🔄 Secure Backups Your data is safely backed up with disaster recovery in mind
📅 Security Audits & Pen Testing Our platform undergoes regular vulnerability scans and updates
👥 Staff Training & Policies Our team is trained in privacy, confidentiality, and compliance best practices