Privacy policy

Introduction

Beyond respects your data privacy and we want you to feel secure when engaging with us. This privacy policy sets out how we will treat your private and personal information when visiting our site.

The Data Protection Act (DPA), Privacy and Electronic Communications Regulations (PECR) and The General Data Protection Regulation (GDPR) which is EU wide and far more extensive, seek to protect and enhance the rights of data subjects. These rights cover the safeguarding of personal data, protection against the unlawful processing of personal data and the unrestricted movement of personal data within the EU. It should be noted that GDPR does not apply to information already in the public domain such as Companies House data.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us at clinics@beyondclinics.co.uk.

This Privacy Policy applies only to our online activities and is valid only for visitors to our website. This policy is not applicable to any information collected offline or via channels other than this website.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information we collect

We may collect, store and use the following kinds of personal information as a result of using our site:

• Information about you, including your name, email address, phone number, and any other personal data you may share using the ‘callback’ form on our website.
• Information about you that you may choose to send to us by using any published email addresses on our website.

Personal information submitted to us will be used for the purposes specified in this Privacy Policy or in relevant parts of the services we may provide.

How we use your information

We use the information that you've supplied to us, in the following ways:

• Send you general (non-marketing) commercial communications in response to your initial enquiry.
• Deal with enquiries and complaints made by or about you in relation to our services.

We will not provide your personal information to any third parties for the purpose of direct marketing.

We may share some basic personal information to approved 3rd parties, by consent only and where there is a direct business interest in relation to the enquiries made to Beyond.

Legal basis for processing

Beyond agrees to comply with our obligations under GDPR to process your data under one or more of the lawful basis for processing; consent, contract, legal obligation, vital interest, public task or legitimate interest. By registering enquiries via our website, you have granted Beyond consent to use this data in compliance with this privacy policy.

Log files

Beyond follows a standard procedure of using log files. These files log visitors when they visit our website and application. The information collected include IP addresses, browser information, referring pages and the URL of the page you requested. This is done to efficiently audit the security of systems.

Cookies

We use cookies for the following purposes:

• Security

  We set cookies to help with the security of our systems.

  Cookie	Purpose	Duration
  XSRF-TOKEN	A CSRF token is a secure random token (e.g., synchronizer token or challenge token) that is used to prevent CSRF attacks. The token needs to be unique per user session and should be of large random value to make it difficult to guess. A CSRF secure application assigns a unique CSRF token for every user session.	1 hour

• Marketing performance

  We use Google Analytics 4 (GA4) to track and analyse the performance of marketing activities, and identify how we can better optimise the site and application for our users. We do not log user IP addresses as part of this integration, nor do we share the data with any other Google service in this respect. We do however track approximate location data (to identify the origin of our users), and hardware/software data to enable us to provide users on certain devices with a better experience.

  Cookie	Purpose	Duration
  _ga	Used to distinguish users.	1 week
  _ga_GACODE	Used to persist session state.	1 week

Marketing

Beyond will only send you email notifications which you have specifically requested or required to alert you to important business documents.

We will only send to you a newsletter and other marketing communications relating to our business or the businesses of carefully-selected third parties which we think may be of interest to you by post or, where you have specifically agreed to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications)/