Privacy Policy

Who we are

Kayora is the data controller for the personal data described in this policy. That means we decide why and how your information is used, and we are responsible for looking after it.

What we collect and why

When you use this website we may collect:

• Enquiry details — your name, email address, phone number and the content of your message, so we can answer your enquiry.
• Consultation requests — the above plus your chosen service and preferred date and time, so we can arrange and confirm your appointment.
• Anti-spam data — if enabled, a Cloudflare Turnstile check runs when you submit a form to confirm you are not an automated script.

We do not use advertising cookies or third-party tracking, and we do not sell or share your information for marketing.

Our lawful basis

For responding to an enquiry or arranging a consultation, our lawful basis is steps taken at your request prior to entering into a contract (UK GDPR Article 6(1)(b)), together with our legitimate interest in running and securing the website (Article 6(1)(f)). Where you give consent — for example by ticking the consent box on a form — you may withdraw it at any time, and doing so will not affect anything done before you withdrew it.

Please don't send health details

Our forms are not intended for sensitive medical information. Please avoid including health details in free-text fields; we will discuss any clinical matters with you directly. If you do send us health information, we treat it as special category data under UK GDPR Article 9 and handle it only for the purposes of providing you with care.

Who we share it with

We use a small number of service providers who process data on our behalf under contract: our website host, our database provider, and our transactional email provider (used only to send you confirmations and to notify us of your enquiry). They act on our instructions and may not use your data for their own purposes. We will also disclose information where we are required to by law.

How long we keep it

• General enquiries — kept for 12 months from your last contact.
• Consultation requests that do not go ahead — kept for 12 months, then deleted.
• Records relating to care you receive — retained for the period required by professional and regulatory obligations for clinical records, which is longer than the periods above.

Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to request deletion, to restrict or object to processing, and to receive your data in a portable format. To exercise any of these rights, contact us using the details below. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put things right first.

Contact us

Please use our contact form to reach us about anything in this policy, including any request relating to your personal data.