Privacy policy

Who is responsible

Tordale Health Ltd is the controller of personal information used to manage enquiries, recruitment correspondence and its own service administration. Company number: 16253497. Registered office: 128 City Road, London, United Kingdom, EC1V 2NX.

For privacy questions or requests, email hello@tordalehealth.com with “Privacy request” in the subject, or write to our registered office.

What this notice covers

This notice covers the public website, initial enquiries, recruitment enquiries and payment administration. It is not a complete clinical-record privacy notice. Ask the assessment team for the privacy information relevant to your clinical pathway before supplying detailed health information.

This website currently links to email and an external Stripe checkout. It does not provide a clinical upload portal, an online diagnostic questionnaire or an integrated appointment calendar.

Information and purposes

• Website delivery and security: hosting services may process IP addresses, browser/device information, requested pages and access times to deliver pages, identify faults and protect the service.
• Enquiries: we use the contact details and message you provide to respond and discuss possible services.
• Payments: Stripe processes checkout information. Tordale may access transaction status, payer contact details, amount and reference for payment reconciliation, refunds and financial records. Full card details are entered into Stripe rather than collected by this website.
• Recruitment: we use contact details, professional history and qualifications you choose to send to respond to your expression of interest.
• Concerns and rights requests: we use relevant correspondence to investigate and respond.

Lawful grounds

For a request to arrange a service, we use information as necessary to take steps at your request before entering a contract, and to administer an agreed service. We rely on legitimate interests in responding to general correspondence, considering professional enquiries, keeping the website secure and addressing concerns, subject to your rights and interests.

Legal obligations may require us to retain financial information or respond to lawful requests. Where processing is based on consent, you can withdraw that consent by contacting us.

Health information needs an additional legal condition. Please avoid detailed health information in initial correspondence. Before clinical information is collected, the assessment team must explain the applicable health-data condition, confidentiality arrangements and clinical-record handling.

Providers and sharing

Website delivery uses OpenAI Sites and Cloudflare infrastructure; company email is provided through Hostinger. These services process information needed to deliver their functions. Stripe processes payments under its own privacy information and applicable arrangements with Tordale.

Relevant staff and service providers may access information where needed for enquiries, administration, technical support or professional advice. Disclosure may also be necessary to meet a legal requirement or respond to a serious safeguarding concern.

International processing

Our technology providers operate internationally, so processing may take place outside the UK. The location and transfer safeguards depend on the provider and service. Contact us for the applicable provider and transfer information before sending sensitive records. This notice does not represent that all information remains in the UK.

How long information is kept

Retention depends on the purpose: whether an enquiry is still active, whether it leads to a service, the need to resolve a complaint or dispute, and financial or other legal recordkeeping requirements. Recruitment correspondence is assessed against whether there is an ongoing recruitment discussion and a legitimate need to retain it.

Clinical records have separate retention requirements, particularly for children. Ask for the applicable clinical-record notice before assessment. Contact us to ask about the retention of a particular record or request deletion; legal or professional obligations may limit deletion.

Your rights and choices

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information. We may need proportionate identity information before responding. These rights are subject to legal conditions and exceptions.

You have the right to object to processing based on legitimate interests. You can also object to direct marketing at any time. Contact hello@tordalehealth.com to exercise these rights or withdraw consent where consent is the basis.

Providing initial enquiry information is voluntary, but without adequate contact details we may not be able to respond or arrange a service. The public website does not make automated clinical decisions.

Children and family enquiries

Parents and carers should initially provide their own contact details and only a brief outline of the enquiry. Do not send school reports, identity documents or detailed information about a child through the public contact route. Authority to act and appropriate consent or involvement must be addressed within the clinical pathway.

Complaints and changes

Please contact us if you are concerned about the use of your information. You can also raise a data-protection complaint with the Information Commissioner’s Office (ICO).

We will update this notice when website functions or information-handling arrangements change. The date above identifies this version.