Privacy policy
Last updated: [DATE]
Who we are
Midlife Health is a trading name of [COMPANY NAME], a company registered in England and Wales (company number [COMPANY NUMBER]), registered office [REGISTERED ADDRESS]. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
[COMPANY NAME] is the data controller for the personal information you give us on this website. You can contact us about this policy or your information at [CONTACT EMAIL].
What Midlife Health does
Midlife Health is a referral service. We send you our menopause checklist and, if you would like, we can introduce you to a menopause clinic. We are not a clinic and we do not give medical advice.
We only share your details with a named partner clinic after you have agreed to it. Before we share anything, we will tell you who the clinic is. A clinic we introduce you to may pay us for the introduction.
The information we collect
- Your answers to our short quiz: your age range, the area you are based in, when you would like to speak to a specialist, and what would help you most.
- Your contact details: your first name, phone number and email address.
- Your consent: the wording you agreed to and the date and time you agreed.
- How you reached us: the page address and any campaign tags in the link you followed (for example the name of the advert).
- Technical information: if you accept advertising cookies, information about your device and visit (see "Cookies" below).
We do not ask any health questions, and please do not send us details of your health or any treatment. Because you have shown an interest in menopause information, we treat everything you give us with extra care, keep it to the minimum we need and only use it as described here.
How we use your information and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Send you the checklist and contact you by phone, text and email about your results and options | Your consent (Article 6(1)(a)), and for marketing by text and email, the Privacy and Electronic Communications Regulations |
| Introduce you to a named partner clinic, only after you have agreed and been told who it is | Your consent (Article 6(1)(a)) and, where your information could suggest something about your health, your explicit consent (Article 9(2)(a)) |
| Keep a record of your consent and of what we have shared | Legal obligation (Article 6(1)(c)) and our legitimate interests in being able to show we acted on your consent (Article 6(1)(f)) |
| Check that contact details are real and stop misuse of our forms | Our legitimate interests (Article 6(1)(f)) |
| Measure how our adverts perform | Your consent to advertising cookies (Article 6(1)(a)) |
You can withdraw your consent at any time by emailing [CONTACT EMAIL] or by replying STOP to any text message. Withdrawing consent does not affect anything we did before you withdrew it.
Who we share your information with
- A named partner clinic, only after you have agreed and been told who it is. That clinic becomes a separate data controller for your information and will give you its own privacy notice.
- Service providers who help us run this service, for example website hosting ([HOSTING PROVIDER]), our customer contact system ([CRM PROVIDER]) and our phone and text provider ([TELEPHONY PROVIDER]). They act only on our instructions.
- Meta (Facebook and Instagram), only if you accept advertising cookies. We send Meta that a page was viewed and that a form was submitted, with your contact details in a scrambled (hashed) form so Meta can match the visit to an advert. We never send Meta your quiz answers.
- Regulators, courts or the police where the law requires it.
We do not sell your information.
International transfers
Some of our service providers may process information outside the UK. Where they do, we make sure there are appropriate safeguards in place, such as the UK International Data Transfer Agreement or an adequacy decision. Contact us for details.
How long we keep your information
We keep your details for up to [RETENTION PERIOD, e.g. 12 months] after our last contact with you, unless you ask us to delete them sooner. We keep a record of your consent for up to [CONSENT RECORD PERIOD, e.g. 6 years] so we can show how and when you agreed.
Cookies
We use essential cookies and similar storage to run this page, for example to remember your cookie choice. With your permission, we also use advertising cookies from Meta to measure how our adverts perform. These are only set if you choose "Accept" on our cookie banner. You can change your choice at any time by clearing this site's cookies and storage in your browser and visiting the page again.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you;
- ask us to correct information that is wrong or incomplete;
- ask us to delete your information;
- ask us to restrict or stop using your information, or object to how we use it;
- ask us to move your information to another organisation;
- withdraw your consent at any time.
To use any of these rights, email [CONTACT EMAIL]. We will reply within one month.
Complaints
If you are unhappy with how we have handled your information, please contact us first at [CONTACT EMAIL]. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.
