Privacy notice

Last updated 29 September 2026

PatientFlow Ltd (company number 16503886, "we", "us") provides patient acquisition services to UK aesthetics clinics. This notice explains what personal data we collect through patientflow.uk and how we handle it. We keep it short.

What we collect on this site

• Projection requests. If you ask us to email you a projection, we collect your email address and the two figures you set on the calculator. We use them to send you the projection and to follow up about our service.
• Fit check. If you complete the fit check at /fit-check/, we collect your answers, your first name, clinic name, email and mobile number. Submissions are stored by our host, Netlify, and may be passed to our CRM, GoHighLevel, so we can follow up.
• Fit check that ends early. If the fit check stops before the last step because we're not the right fit, we keep the answers you gave up to that point, without your name or contact details, so we can check our questions are fair. If you choose to leave your name and email on that screen, we keep those too, in our CRM (GoHighLevel), and use them only to let you know if that changes. One reply asking us to stop is enough.
• Call bookings. If you book a call, scheduling is handled by Calendly, who collect your name, email, and the time you choose under their own privacy policy.
• Where you came from. When you arrive, the page notes the website that sent you (for example a search engine or an AI assistant), any campaign tags in the link, and the first page you landed on. This is held in your browser for that visit only (session storage, not a cookie) and is attached to a form or booking only if you submit one.
• Technical data. Netlify keeps standard server logs. Fonts load from Fontshare, and the embedded Calendly widget may set its own cookies.

Advertising and analytics

• Meta Pixel. The home page and the fit check can use the Meta Pixel, which sets cookies and tells Meta (Facebook and Instagram) when a page is viewed, a form is submitted or a call is booked. We use it to measure and improve our own adverts. It loads when you visit those pages. You can control ad personalisation in your Meta account settings, and block or clear cookies in your browser at any time.
• Google Analytics. Our pages may use Google Analytics to show us which pages clinic owners find useful. If it is switched on it sets cookies when you visit, and you can block or clear them in your browser.

Lawful basis and retention

We process enquiry data on the basis of legitimate interest: you asked us for something and we respond. We keep enquiry details only as long as there is a live conversation or business relationship, then delete them. We never sell or share your details for marketing.

Patient data for client clinics

When we run patient acquisition for a clinic, patient enquiries and qualification conversations are processed on that clinic's behalf under contract, stored within the EU, and handled to UK GDPR. Patients can contact their clinic, or us, about that data at any time.

Your rights

Under UK GDPR you can ask us to access, correct, or delete your personal data, restrict or object to processing, or export it. Email us and we will act on it promptly. You can also complain to the Information Commissioner's Office.

Contact

Data queries: mumen@patientflow.uk