+44 161 496 0721
1. Data controller
The data controller is Somnastra, Suite 4, Deansgate Health Rooms, 112 Deansgate, Manchester M3 2BQ, England. Email for privacy matters: [email protected]. General contact: [email protected], telephone +44 161 496 0721.
2. What data we collect
Booking request form
When you send a booking request we collect: full name, telephone number, selected consultation type, preferred time of day, optional message, and your Privacy Policy consent. We do not ask for payment card details, medical history, diagnoses or symptoms through this form.
Website and cookies
We process technical data required to operate the site and, if you consent, analytics and marketing cookies. Details are in our Cookie Policy. You can change cookie choices at any time via Cookie Settings.
Email or phone contact
If you contact us directly, we process the information you choose to provide so we can respond.
3. Purposes and legal bases
- Responding to booking requests and arranging appointments — performance of steps prior to a contract / contract (Art. 6(1)(b) UK GDPR).
- Managing cancellations, confirmations and clinic communications — contract / legitimate interests in operating the practice (Art. 6(1)(b) and 6(1)(f)).
- Recording your Privacy Policy consent for the form — consent (Art. 6(1)(a)), where relied upon for that disclosure.
- Strictly necessary cookies and security — legitimate interests in running a secure website (Art. 6(1)(f)).
- Analytics and marketing cookies / advertising tags — consent (Art. 6(1)(a)). These are not set until you accept the relevant categories.
- Legal and regulatory records — legal obligation where applicable (Art. 6(1)(c)).
Where we rely on legitimate interests, we balance those interests against your rights. You may object to processing based on legitimate interests as described below.
4. Recipients
Data may be accessed by Somnastra staff involved in scheduling and clinic administration. Service providers that host this website or deliver email may process data on our instructions as processors. If you consent to marketing cookies, advertising partners such as Google and Meta may receive online identifiers as described in the Cookie Policy. We do not sell your personal data.
5. International transfers
Our primary operations are in England. Some technology providers may process data outside the UK / EEA. Where that occurs, we use appropriate safeguards such as adequacy regulations or standard contractual clauses, as applicable.
6. Retention
- Booking requests that do not become appointments: typically up to 12 months, then deleted or anonymised unless we need them for a dispute.
- Confirmed appointment and related clinic records: retained as required for clinical and legal record-keeping — commonly up to 8 years for adult records in private practice contexts, or longer if the law requires.
- Cookie consent logs: up to 24 months.
- Cookie preference stored in your browser: until you clear it or update Cookie Settings.
7. Your rights
Under UK GDPR you may have the right to access, rectify, erase, restrict or object to processing, and to data portability, subject to legal limits. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.
To exercise rights, email [email protected]. To change cookie preferences, use Cookie Settings on this website (as easy as giving consent).
8. Complaints
You may lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/. We would appreciate the chance to address your concern first via [email protected].
9. Mandatory form fields and automated decisions
Required fields on the booking form are name, phone, consultation type, preferred time and Privacy Policy consent. The optional comment field is not required. We do not use automated decision-making or profiling that produces legal or similarly significant effects about you.
10. Google advertising data
If you consent to marketing cookies used with Google advertising products, Google may process data as described in Google’s Business Data Responsibility materials. Analytics and advertising tags load only after the relevant consent.
11. Health information
Please do not send detailed medical history, diagnoses or sensitive health information through the website form. Clinical information is collected during your in-person consultation under appropriate clinical confidentiality arrangements.
12. Updates
We may update this Privacy Policy when our practices or the law change. The “Last updated” date at the top will be revised accordingly.