GDPR & data

Data controller

ZuricareUK is the data controller for the personal data we process. For any data protection matter, contact hello@zuricareuk.com.

Lawful bases for processing

• Consent — for marketing and for processing health-related information.
• Contract — to deliver the sessions and resources you request.
• Legal obligation — to meet record-keeping and insurance requirements.
• Legitimate interests — to operate, secure and improve our service.

Special category (health) data

Information about your pregnancy, postnatal recovery or wellbeing is “special category” data. We only process it with your explicit consent, or where otherwise permitted by law, and we apply extra care to keep it secure.

Data processors

We work with a small number of processors who handle data on our behalf under contract, including:

• Cal.com — appointment scheduling and secure card payments for paid bookings.
• Stripe — card payment processing, used by Cal.com to take payment for paid bookings.
• Video and email tools — used to deliver sessions and send resources.

International transfers

Where a processor operates outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

Data retention

We retain personal data only as long as necessary for the purposes for which it was collected and to meet legal and professional obligations, then securely delete it.

Your rights under UK GDPR

• The right to be informed about how your data is used.
• The right of access to your data.
• The right to rectification of inaccurate data.
• The right to erasure (“to be forgotten”).
• The right to restrict or object to processing.
• The right to data portability.
• Rights related to automated decision-making (which we do not use).

Exercising your rights

To make a request, email hello@zuricareuk.com. We will respond within one month, as required by law.

Complaints

You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you are unhappy with how we handle your data — though we’d appreciate the chance to put things right first.