Privacy Policy
Last updated: [Date – to be set at publication]ClinicsRise (“we,” “us,” “our”) respects your privacy and is committed to handling your personal data responsibly. This privacy policy explains what data we collect, why we collect it, how we use it, and what rights you have.
We’ve written this policy in plain language because we believe you should understand how your data is handled without needing a lawyer to translate it.
Note: This policy is a plain-language draft and must be reviewed by a qualified legal professional before publication to ensure compliance with applicable laws in every market ClinicsRise operates in, including Pakistan, the Middle East, the EU (GDPR), the UK (UK-GDPR), and US state privacy laws.
Who We Are
ClinicsRise is a digital marketing agency for clinics, operating at clinicsrise.com. We provide SEO, social media, branding, and website design services to dental, aesthetic, physiotherapy, and specialist medical practices.
If you have any questions about this policy or how we handle your data, contact us at the email address above.
What Data We Collect
- Data you provide directly. When you fill in a form on our website (contact form, free audit request, newsletter signup), you provide us with information that may include your name, email address, phone number, clinic name, clinic website URL, and any details you include in your message.
- Data collected automatically. When you visit our website, we automatically collect certain technical data through cookies and similar technologies. This may include your IP address, browser type, device type, operating system, pages visited, time spent on pages, referring website, and approximate geographic location (country/city level, not precise location).
- Data from third-party tools. We use analytics tools (such as Google Analytics), advertising platforms (such as Google Ads and Meta), and email marketing platforms to understand how visitors use our website and to measure the effectiveness of our marketing. These tools may collect data as described in their own privacy policies.
Why We Collect Your Data and How We Use It
We collect and use your data for the following purposes:
- To respond to your enquiry. When you submit a contact form or audit request, we use your name, email, and message to respond to you. Legal basis: legitimate interest (responding to your request) or, where applicable, your consent.
- To deliver services. If you become a client, we use your contact and business details to manage the project, communicate about deliverables, and provide the services you’ve contracted. Legal basis: performance of a contract.
- To send marketing communications. If you subscribe to our newsletter, we use your email address to send you clinic marketing insights. You can unsubscribe at any time. Legal basis: consent.
- To improve our website. We use analytics data to understand how visitors use our site, which pages perform well, and where we can improve the experience. Legal basis: legitimate interest.
- To run advertising campaigns. If you arrive at our site through a Google or Meta ad, we may use cookies to measure whether the ad produced a visit and to improve our targeting. Legal basis: consent (via cookie banner).
Cookies and Tracking Technologies
We use cookies on our website. Cookies are small text files stored on your device that help us understand how you use our site and improve your experience.
- Essential cookies. Required for the website to function (e.g. form submissions, security). These are always active.
- Analytics cookies. Help us understand traffic patterns and user behaviour (e.g. Google Analytics). These are only set with your consent.
- Advertising cookies. Used by Google Ads and Meta to measure ad performance and build retargeting audiences. These are only set with your consent.
You can manage your cookie preferences at any time using the cookie settings on our website. You can also clear cookies through your browser settings.
Who We Share Your Data With
We do not sell your personal data to anyone.
We may share your data with the following types of third parties, only to the extent necessary to operate our business and deliver our services:
- Service providers. Hosting providers, email platforms, analytics tools, and CRM systems that process data on our behalf under data processing agreements.
- Advertising platforms. Google and Meta, when you interact with our ads or we use their tracking tools on our website (subject to your cookie consent).
- Legal requirements. If required by law, regulation, or legal process, we may disclose your data to comply with a legal obligation.
We do not share your data with other marketing agencies, data brokers, or any party for their own marketing purposes.
How Long We Keep Your Data
- Enquiry data (contact forms, audit requests). We retain this for 24 months after your last interaction, then delete it unless you’ve become a client.
- Client data. We retain project files and communication records for the duration of the client relationship plus 36 months, for reference and legal compliance.
- Newsletter subscribers. We retain your email address until you unsubscribe. After unsubscribing, your email is removed from our mailing list within 30 days.
- Analytics data. Aggregated and anonymised analytics data is retained indefinitely. Data that could identify you (e.g. IP addresses) is retained for the period set by the analytics platform (typically 14–26 months for Google Analytics).
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access. You can request a copy of the personal data we hold about you.
- Correction. You can ask us to correct any inaccurate or incomplete data.
- Deletion. You can ask us to delete your personal data, subject to any legal obligations that require us to retain it.
- Objection. You can object to our processing of your data for direct marketing purposes.
- Withdrawal of consent. Where we process your data based on consent (e.g. newsletter, cookies), you can withdraw that consent at any time.
- Data portability. You can request your data in a structured, machine-readable format (where applicable under GDPR/UK-GDPR).
To exercise any of these rights, email us at hello@clinicsrise.com. We respond to all data requests within 30 days.
If you’re located in the EU or UK and believe we haven’t handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
International Data Transfers
ClinicsRise operates across Pakistan, the Middle East, Europe, the UK, and the US. Your data may be transferred to and processed in countries other than your own. When we transfer data internationally, we ensure appropriate safeguards are in place – including standard contractual clauses where required by GDPR/UK-GDPR.
Children’s Privacy
Our website and services are not directed at individuals under 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we update the “Last updated” date at the top of this page. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.
Contact Us About Privacy
If you have questions about this privacy policy, want to exercise your data rights, or have concerns about how we handle your information, contact us at:
Email: hello@clinicsrise.com
Subject line: Privacy enquiry
Response time: Within 30 days for data rights requests; within 2 business days for general privacy questions.
