Last updated: 2 November 2026
This Privacy Policy explains how UpMedico Limited collects and uses personal data when you visit upmedico.com, contact us, book a call or work with us. Our services are provided to businesses, so this policy is written mainly for clinic owners, practice managers and other business contacts.
UpMedico Limited is the controller of the personal data described in this policy.
For any question about this policy or your personal data, including requests to exercise your rights, email our data protection contact at it@upmedico.com.
This policy applies to people who visit our website, fill in a form, book a call, email or phone us, receive our emails, or are contacts at a client, prospective client or supplier.
It does not cover patient data that we process on behalf of the clinics we work with, for example call tracking data, call recordings or enquiries submitted through a clinic's landing pages. For that data we act as a processor under a written data processing agreement. The clinic is the controller, and its own privacy notice applies. If you are a patient, please contact the clinic directly.
Please do not send us health information about yourself or any patient through our website forms or by email.
Information you give us. Your name, job title, clinic or company name, email address, phone number and website; the content of your message; the answers you give when booking a call; information about your clinic's services, budget and marketing that you choose to share; and the content of our calls and emails.
Information collected automatically. Your IP address, device and browser type, pages viewed, the site that referred you, approximate location derived from your IP address, and advertising click identifiers. With your consent, we also collect how you interact with our pages (clicks, scrolling and session recordings). See section 7 on cookies.
Information from other sources. Business information that is publicly available, such as your clinic's website, your LinkedIn profile and company registers; information that identifies the organisation a website visit comes from; and reviews you leave about us on Clutch.
| Purpose | Data used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Reply to your enquiry and arrange a consultation or Results Call | Contact details, message, booking answers | Steps taken at your request before entering into a contract (Art. 6(1)(b)); our legitimate interest in answering business enquiries (Art. 6(1)(f)) |
| Record or transcribe calls, only after telling you at the start of the call | Audio, transcript, call notes | Our legitimate interest in keeping accurate notes and improving our proposals (Art. 6(1)(f)). You can ask us not to record |
| Provide our services, manage the client relationship and invoice | Contact details, contract and billing information, communications | Performance of a contract (Art. 6(1)(b)); legal obligations on accounting and tax (Art. 6(1)(c)) |
| Send insights, updates and invitations by email | Name, email address, marketing preferences | Your consent (Art. 6(1)(a)), or our legitimate interest for existing clients and business contacts, as permitted by the ePrivacy rules (S.I. No. 336/2011 in Ireland and PECR in the UK). Every email includes an unsubscribe link |
| Contact clinic decision-makers about our services | Business contact details, publicly available business information | Our legitimate interest in promoting our services to businesses (Art. 6(1)(f)). You can opt out at any time |
| Measure and improve our website | Usage data, cookies, session recordings | Your consent through the cookie banner (Art. 6(1)(a)) |
| Measure our advertising and show you relevant ads | Cookies, advertising identifiers | Your consent through the cookie banner (Art. 6(1)(a)) |
| Protect our website and forms from spam and misuse | IP address, device data, reCAPTCHA signals | Our legitimate interest in keeping the website secure (Art. 6(1)(f)) |
| Comply with the law and respond to authorities | Any relevant data | Legal obligation (Art. 6(1)(c)) |
| Establish, exercise or defend legal claims | Any relevant data | Our legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, we have weighed our interest against your rights and expectations. You can object at any time (section 9).
We do not sell personal data. We share it only with service providers that act on our instructions under a contract, and only as far as they need it:
| Provider | What it does for us |
|---|---|
| HubSpot | CRM, website forms, email, website analytics |
| Google Analytics 4, Google Ads measurement, reCAPTCHA | |
| Hotjar | Heatmaps and session recordings, only with your consent |
| Calendly | Booking of calls |
| WhatConverts | Call tracking and recording of our calls with you |
| lemlist | Business outreach emails and identification of the organisations visiting our website |
| Claspo | On-site forms and pop-ups |
| Ahrefs | Website traffic statistics |
| Clutch | Display of client reviews |
| Hostinger | Website and email hosting |
We may also share data with our professional advisers (accountants, lawyers, insurers), with public authorities where the law requires it, and with a buyer or investor if our business is reorganised or sold. Some providers, such as Google for advertising, may also use data for their own purposes as independent controllers; their own privacy policies then apply.
Some of our providers are based in, or access data from, countries outside the European Economic Area, mainly the United States. When this happens, we rely on a European Commission adequacy decision (including the EU-US Data Privacy Framework for certified companies, and the decision for the United Kingdom renewed in December 2025) or on the Standard Contractual Clauses approved by the European Commission, with the UK Addendum where UK data is involved. You can ask us for a copy of the relevant safeguards.
We use strictly necessary cookies to run the website. All other cookies (preferences, statistics and marketing) are placed only if you accept them in our cookie banner. You can change or withdraw your choice at any time using the button below. The full list of cookies, with their provider, purpose and duration, is in the annex at the end of this policy.
| Data | How long |
|---|---|
| Enquiries and prospects who do not become clients | 24 months from our last contact |
| Call recordings and transcripts | 12 months, unless they become part of a client file |
| Client records, contracts and invoices | For the duration of the relationship and 6 years after it ends |
| Email marketing data | Until you unsubscribe; we then keep your email address on a suppression list so we do not contact you again |
| Website analytics data | Up to 14 months (Google Analytics); up to 365 days (Hotjar recordings) |
| Cookies | As stated in the cookie list below |
You have the right to access your personal data, have it corrected, have it erased, restrict its use, receive it in a portable format, and object to its use. You can object to direct marketing at any time, and we will stop. Where we rely on consent, you can withdraw it at any time; this does not affect processing carried out before. We do not make decisions about you based solely on automated processing.
To exercise your rights, email it@upmedico.com. We reply within one month, which can be extended by two months for complex requests; we will tell you if this happens. We may ask you to confirm your identity. Making a request is free.
If you are unhappy with how we handle your data, please contact us first at it@upmedico.com. We will acknowledge your complaint within 30 days and keep you informed until it is resolved.
You also have the right to complain to a supervisory authority:
We protect personal data with access controls, encryption in transit (HTTPS) and contracts with our providers. No system is completely secure, so if we become aware of a breach that affects you, we will act and notify you and the authorities where the law requires it.
Our website and services are intended for businesses and are not directed at anyone under 18. We do not knowingly collect children's personal data.
We may update this policy when our services, tools or the law change. The date at the top shows the latest version. If a change is significant, we will tell our clients by email.
Contact: UpMedico Limited, 60 Merrion Square South, Dublin 2, D02 HE24, Ireland · Company no. 679008 · info@upmedico.com
The table below lists the cookies and similar technologies used on this website. Cookies in the Statistics and Marketing categories are placed only after you accept them in the cookie banner.
| Cookie | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| cmplz_* | UpMedico (Complianz) | Functional | Stores your cookie choices | 365 days |
| _GRECAPTCHA | Google reCAPTCHA | Functional | Protects our forms from spam and abuse | 6 months |
| Calendly cookies | Calendly | Functional | Make the booking widget work when you open it | See Calendly's cookie notice |
| _ga | Google Analytics | Statistics | Distinguishes visitors | 2 years |
| _ga_* | Google Analytics | Statistics | Keeps the state of your session | 2 years |
| _hjSessionUser_* | Hotjar | Statistics | Recognises returning visitors for heatmaps and recordings | 1 year |
| _hjSession_* | Hotjar | Statistics | Holds data about the current session | 30 minutes |
| __hstc | HubSpot | Statistics | Tracks visits and sessions | 6 months |
| hubspotutk | HubSpot | Statistics | Keeps track of a visitor and links form submissions to visits | 6 months |
| __hssc | HubSpot | Statistics | Counts page views in a session | 30 minutes |
| __hssrc | HubSpot | Statistics | Detects when a new session starts | End of session |
| _gcl_au, _gcl_ls | Google Ads | Marketing | Measures conversions from our ads | 90 days |
| cl.* (local storage) | Claspo | Marketing | Decides when to show our on-site forms and pop-ups | Until deleted from your browser |
©2026 UpMedico Ltd - London Office: 4th Floor, Silverstream House, 45 Fitzroy Street, Fitzrovia, London, W1T6EB, UK. Dublin Office: 60 Merrion Square South, Dublin 2, D02 HE24, Ireland · Registered in Ireland, company no. 679008.
