Privacy Policy

1. Introduction

Clinic Enhance (operated by Ambitions Web Ltd, "we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our review collection services (the "Services"). We are registered with the Information Commissioner’s Office (ICO Registration: ZB804022) and adhere to applicable data protection laws, including GDPR.

2. Our Role as a Data Processor

When providing Services to our clients (e.g., medical clinics), we act as a **Data Processor** on their behalf. Our client is the **Data Controller**, responsible for the lawful collection of their customers' data. We process this data strictly based on our client's instructions to provide our Services.

3. Information We Process

We process two categories of information:

• Client Information: When you sign up for Clinic Enhance, we collect your business contact details, account credentials, and payment information to manage your account and provide our Services.
• Customer Data: To perform our Services, our clients provide us with limited contact information for their customers, which typically includes only their **name, email address, and phone number**. We do not request, store, or process any sensitive personal data, such as health or medical information.

4. How We Use Information

The information we process is used exclusively for the following purposes:

• To send review requests via email and SMS on behalf of our clients.
• To operate our feedback filtering system, which forwards any negative feedback directly to our client.
• To provide and manage the reputation dashboard.
• To facilitate review response services for eligible clients.
• To maintain and improve the security and performance of our Services.

5. Legal Basis for Processing

Our legal basis for processing your customers' data for review requests is **Legitimate Interest** (under GDPR Article 6(1)(f)). Requesting feedback on a provided service is a legitimate business activity that does not typically override an individual's rights, especially as we only process non-sensitive contact data and provide clear opt-out mechanisms. For more details, please see our Consent Guide.

6. Data Sharing and Sub-processors

We do not sell personal data. We only share information with essential third-party service providers (sub-processors) who help us deliver our Services. These include:

• GoHighLevel: For secure data storage, CRM functionalities, and workflow automation.
• Twilio: For delivering SMS messages in a compliant manner.

We have data processing agreements in place with these providers to ensure they meet high standards of data security and confidentiality.

7. Data Security and Retention

We implement robust technical and organizational measures to protect all data we process. This includes encryption, access controls, and regular security assessments. Client and customer data is stored securely within GoHighLevel's infrastructure.

We retain your customers' contact information for the duration of your active subscription to manage ongoing review campaigns and prevent duplicate requests. Upon termination of your service, all associated customer data will be securely deleted from our active systems in accordance with our data retention schedule.

8. Your Data Protection Rights

Under GDPR, you and your customers have certain data protection rights, including the right to access, rectify, or erase personal data, and to restrict or object to its processing. All communications sent through our platform include a clear and easy way for recipients to opt-out of future messages. To exercise any data protection rights, please contact us directly at the email below.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" at the top.

10. Contact Information

For any questions or concerns regarding this Privacy Policy or our data practices, please contact us:

Clinic Enhance
(Operated by Ambitions Web Ltd)
80 Magdalen Road, Exeter, Devon, EX2 4TT, United Kingdom
Email: [email protected]