Privacy Policy

Overview

Gozo Chemists (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains what information we collect when you use our website and booking platform, why we collect it, and the rights you have over your data.

By using our website or booking an appointment, you agree to the practices described below. If you do not agree, please do not use the service.

Information we collect

We collect information you provide directly, information generated when you interact with our services, and limited information from third parties (such as authentication providers). Specifically:

• Account details: name, email address, phone number, and password (stored as a secure hash).
• Booking details: the service requested, chosen professional, date, time, and any notes you add for the clinician.
• Communications: messages you send through our contact forms, dashboard messages, or email.
• Technical data: IP address, browser type, device information, and pages visited, collected through cookies and server logs.

How we use your information

We use the information we collect to operate and improve our service. This includes:

• Scheduling, confirming, and managing your appointments.
• Delivering booking confirmations, reminders, and service updates.
• Providing customer support and responding to your enquiries.
• Maintaining the security, integrity, and reliability of the platform.
• Meeting our legal, regulatory, and professional obligations.

We do not sell your personal information, and we do not use your health-related information for advertising.

Legal basis for processing

Where applicable, we rely on one or more of the following lawful bases under the EU/UK GDPR:

• Contract: to deliver the bookings and services you request.
• Consent: where you have opted in, for example to marketing communications.
• Legitimate interests: to keep our services secure, prevent fraud, and improve the platform.
• Legal obligation: to comply with healthcare, accounting, and tax regulations.

How we share your information

We only share your data with parties who help us run the service, and only to the extent necessary. This may include:

• The specific professional you have booked with, so they can prepare for your appointment.
• Infrastructure providers (for example Supabase and our hosting provider) under strict data-processing agreements.
• Payment processors, if you pay online, for the sole purpose of completing the transaction.
• Regulators, courts, or law-enforcement agencies where we are legally required to do so.

Data retention

We keep your personal information only for as long as we need it for the purposes described in this policy, or as required by law. Clinical records are retained in line with applicable healthcare record-keeping rules. When data is no longer needed, we either delete or anonymise it.

Security

We use industry-standard technical and organisational safeguards to protect your data, including encryption in transit, role-based access controls, and audit logging. No system is perfectly secure, so please choose a strong, unique password and keep your account credentials private.

Your rights

Subject to local law, you have the right to access, correct, or delete your personal data, to restrict or object to certain processing, and to request a portable copy of your information. You can exercise most of these rights directly from your dashboard, or by contacting us using the details at the bottom of this page.

Cookies and similar technologies

We use a small number of essential cookies to keep you signed in and to remember the choices you make in our cookie banner. These are always on: disabling them in your browser will prevent signing in and the booking flow from working correctly.

With your permission, we also load an interactive Google Map on our contact page. The map is provided by Google and may set Google’s own cookies when it loads, so it stays hidden until you allow “third-party content” in the cookie banner; until then we show our address and a link to Google Maps instead. We do not currently use analytics or advertising cookies, and we will ask for your consent before introducing any.

You can change your choices at any time using the cookie icon in the corner of the page or the “Cookie preferences” link in the footer.

Changes to this policy

We may update this policy from time to time to reflect changes in our service or legal obligations. When we make significant changes we will update the “Last updated” date at the top and, where appropriate, notify you directly.