This policy explains how TMS Cheltenham Limited handles your personal information when you visit our website. It applies to all visitors, whether or not you go on to become a patient.

If you become a patient, the processing of your clinical and health information is covered by our separate Patient Privacy Notice, which is available at the clinic and on request.

TMS Cheltenham Limited is the data controller for any personal data collected through this website. Our Data Protection Officer is Dr Joseph Ramsay, contactable using the details above.

2.1 Information you provide to us

If you use the contact form on our website, we collect the information you enter. This will typically include your name, email address, telephone number, and the content of your enquiry.

Once your enquiry has been received, it is transferred to our email system and deleted from the Squarespace platform. We do not use contact form submissions for marketing or any purpose other than responding to your enquiry.

2.2 Information collected automatically

When you visit our website, Squarespace (our website hosting provider) automatically collects certain technical information, including your IP address, browser type and version, operating system, pages visited, time spent on each page, and referring website. This information is collected in aggregate for analytics purposes and is not used to identify you personally.

Cookies are small text files placed on your device when you visit a website. Our website uses the following types of cookies:

We do not use any third-party advertising or tracking cookies. We do not serve targeted advertisements.

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies that have already been set. Please note that disabling strictly necessary cookies may affect the functionality of the website.

4.1 Squarespace Inc.

Our website is hosted by Squarespace Inc. Squarespace processes technical data (IP addresses, cookies, analytics) and any information submitted through the contact form on our behalf. Squarespace’s servers are located in the United States. Data transfers from the UK to the US are protected by Standard Contractual Clauses (SCCs) incorporated into Squarespace’s data processing terms.

Squarespace’s privacy policy is available at www.squarespace.com/privacy.

4.2 No other third parties

We do not share any data collected through this website with any other third party, except where required by law.

We process the personal data collected through this website under the following legal bases:

• Contact form submissions — UK GDPR Article 6(1)(b): processing necessary for steps taken at your request prior to entering into a contract (responding to your enquiry about our service)
• Strictly necessary cookies — UK GDPR Article 6(1)(f): legitimate interests (ensuring the website functions correctly and securely)
• Analytics cookies — placed only with your consent via the cookie banner, in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR)

Contact form submissions are deleted from the Squarespace platform once the enquiry has been received and transferred to our email system. If your enquiry leads to a clinical relationship, subsequent correspondence is retained in accordance with the periods set out in our Patient Privacy Notice.

Analytics data is retained in aggregate by Squarespace for up to 2 years. This data does not identify individual visitors.

Cookie data expires according to the durations set out in the table above.

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate information
• Erasure — ask us to delete your data in certain circumstances
• Restrict processing — ask us to limit how we use your data
• Data portability — receive your data in a portable format where applicable
• Object — object to processing based on legitimate interests

To exercise any of these rights, contact Dr Joseph Ramsay using the details at the top of this page. We will respond within one month.

This website is not directed at children under 16. We do not knowingly collect personal data from children through the website. If you believe a child has submitted personal data through our contact form, please contact us and we will delete it promptly.

If you are unhappy with how we have handled your data, please contact us in the first instance. You also have the right to complain to the Information Commissioner’s Office:

We may update this policy from time to time. The ‘Last updated’ date at the top of this page will always reflect the most recent version.