Privacy policy
Last updated 7 November 2026
Who we are
The data controller is Asaru Labs Ltd (company number 16138089), a company registered in England and Wales, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. We are registered with the Information Commissioner's Office (registration number C1678773). Contact us about privacy at [email protected].
What we collect and why
| Data | Why | Lawful basis | How long |
|---|---|---|---|
| Email address, postcode (and its location), radius and patient types, when you set up an alert | To send the alerts you asked for, and the confirmation email | Consent (you can withdraw at any time by unsubscribing) | Until you unsubscribe, then deleted within 30 days. Unconfirmed sign-ups are deleted after 7 days. |
| Call reports (outcome, date, optional note) | To publish what callers experienced | Legitimate interests (helping other patients) | While relevant to the practice listing |
| A one-way hash of your IP address combined with a daily-rotating secret, when you submit a call report | To prevent spam and abuse (rate limiting) | Legitimate interests (preventing abuse) | 30 days. We never store your raw IP address. |
| Messages you send through the contact form | To reply to you | Legitimate interests | Up to 12 months |
| Analytics data (pages viewed, device type, approximate location) via Google Analytics | To understand how the site is used and improve it | Consent, given through our cookie banner | 14 months in Google Analytics |
| Advertising cookies (Google AdSense), if ads are shown | To show and measure ads | Consent | See cookie policy |
We never send your email address or postcode to analytics or advertising services, and we never sell your data.
Who processes data for us
- Neon (database hosting, EU region)
- Resend (sending emails)
- Cloudflare (security, content delivery and Turnstile spam protection)
- Hetzner (web server hosting, EU)
- Google (Analytics and AdSense, only with your consent)
- postcodes.io (we send the postcode you enter, without your email, to look up its location)
Where a processor transfers data outside the UK, it does so under UK adequacy regulations or the International Data Transfer Agreement.
Your rights
You have the right to access, correct or delete your personal data, to object to or restrict processing, to data portability, and to withdraw consent at any time. Every alert email has a one-click unsubscribe link and a link to manage your alert. For anything else, email [email protected]. We'll respond within one month.
Complaints
If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113.