Your privacy, treated with care.

01. Who we are

AJRAK LTD is the organisation responsible for personal information processed in connection with this website and its health education consultation services, where we act as the data controller.

Our website allows visitors to learn about our services, make enquiries and provide information relevant to a requested consultation. Our service is educational in nature. It is intended to help people understand health terminology and general health information relevant to their questions.

Our company details and contact information are provided below. The registered business address is a correspondence address and should not be taken as confirmation of a consultation venue.

02. Information we collect

The information collected depends on how you use the website and whether you enquire about or arrange a service. Please do not include information that is not needed to explain your enquiry.

Information you provide directly

• Contact details: your name, email address, telephone number and preferred method of contact, where requested.
• Enquiry details: the questions you submit, the service you are interested in, your preferred appointment arrangements and relevant correspondence.
• Consultation information: the health-related topics, terminology or general information you ask to understand, together with notes reasonably needed to prepare for or record the educational consultation, where such notes are created.
• Service administration: appointment confirmations, changes, service records, payment-related references and correspondence needed to administer an agreed service, where applicable.

Information collected when you visit the website

Depending on the website configuration and tools in use, technical information may include your IP address, browser and device type, pages visited, approximate access times, referral information and basic security or error logs. Cookies or similar technologies may also collect information as explained in our Cookie Policy.

Information from other sources

We may receive information from a service provider involved in website hosting, communications, appointment administration or payment processing, where that information is necessary to respond to you or administer a requested service. We do not intentionally obtain additional personal information about you from unrelated sources without a relevant purpose and appropriate lawful grounds.

03. How we use information

We use personal information only for purposes relevant to operating the website, responding to enquiries and providing or administering the services you request.

• To respond to your enquiry and explain the available health education consultation options.
• To understand the general topic you wish to discuss and assess whether it falls within the educational scope of our service.
• To arrange, confirm, amend or administer a consultation and communicate relevant practical information.
• To prepare for a consultation and keep proportionate records of the agreed scope, topics discussed and service communications, where needed.
• To administer service fees, maintain appropriate business and accounting records, and address related enquiries.
• To maintain website operation, identify technical errors, protect forms and communications from misuse, and improve website reliability.
• To handle feedback, complaints, requests concerning personal information and other matters relating to our service arrangements.
• To meet applicable legal, regulatory, accounting or record-keeping obligations and establish or respond to legal claims where necessary.

We do not use information submitted for a consultation to create unrelated advertising profiles. We do not sell personal information. We do not use consultation details for direct marketing unless a separate, lawful basis applies and any required consent has been obtained.

We do not make decisions about the provision of our educational service solely through automated processing that produces legal or similarly significant effects on you. If this practice changes, we will update this notice and provide any information required by law.

04. Lawful grounds for processing

Under applicable UK data protection law, we must have an appropriate lawful basis for each purpose for which personal information is processed. The basis depends on the circumstances and the particular information involved.

These examples describe the bases that may apply; the correct basis must be determined for the actual processing activity. We will not rely on a lawful basis merely because it appears in this policy.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not make processing carried out lawfully before withdrawal unlawful. Where another lawful basis applies, withdrawing consent to a separate activity does not automatically affect that other processing.

05. Health-related information

Because our service concerns health education, an enquiry may contain information about health topics or circumstances. Information that reveals a person’s health may be special category personal data under UK data protection law and requires additional protection.

We ask you to share only the information reasonably needed to explain the educational question you would like to discuss. You should not submit detailed medical records, test results or extensive personal history through a general contact form unless we have specifically explained why they are needed and provided an appropriate way to share them.

Additional protection for health information

Where we process health information that qualifies as special category data, we will identify and document both an applicable lawful basis under Article 6 UK GDPR and an applicable condition under Article 9 UK GDPR and, where required, the relevant conditions and safeguards under the Data Protection Act 2018.

Where explicit consent is the appropriate condition for processing such information, we will request it before the relevant processing takes place. Consent must be specific, informed and freely given. You may decline to provide optional health information, although this may limit our ability to address the particular educational question you wish to discuss.

We will not treat an ordinary contact-form submission as blanket consent to every possible use of health information. If a proposed use requires a different lawful basis or additional permission, we will address that requirement before proceeding.

06. When information may be shared

We do not make personal information available to others without a relevant reason. Information may be shared only where necessary for a stated purpose, permitted by law and supported by an appropriate lawful basis.

Service providers

Depending on the tools actually used on this website, limited information may be processed by providers that support website hosting, form delivery, business email, website security, appointment administration, accounting or payment processing. Such providers should receive only the information needed for their assigned role and be subject to appropriate contractual and security arrangements where required.

Professional advisers and authorities

We may disclose relevant information to professional advisers, insurers or public authorities where this is necessary and lawful, including to comply with a binding legal requirement, establish or defend a legal claim, or protect a person’s vital interests where applicable.

What we do not do

• We do not sell personal information.
• We do not share health-related information with unrelated organisations for their own advertising.
• We do not disclose more information than is reasonably needed for the relevant purpose.

We do not publish identifiable consultation details, enquiries or feedback without an appropriate lawful basis and any permission required in the circumstances.

07. International data transfers

Some website, email, hosting or other service providers may store or process information outside the United Kingdom, depending on their location and technical arrangements.

Where personal information is transferred internationally and UK data protection law requires safeguards, we will ensure that an applicable transfer mechanism is in place. This may include a UK adequacy regulation, an appropriate international data transfer agreement or addendum, or another lawful mechanism available under the applicable rules.

Where required, we will assess the protection available for the transfer and implement supplementary measures if appropriate. Information about relevant safeguards can be requested using the contact details in this policy, subject to applicable legal restrictions.

08. How long we keep information

We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, including any applicable legal, accounting or claims-related requirements. We review retained information and delete or anonymise it when it is no longer needed, unless a lawful reason requires continued retention.

These periods are intended to explain our retention approach. They must be applied consistently with the actual records we hold and the legal requirements relevant to each record. Where a legal hold, unresolved complaint or other valid reason requires longer retention, information may be kept for that additional period and reviewed when the reason ends.

When information is no longer required, we will take reasonable steps to securely delete it or remove identifying details, subject to backup cycles and any applicable retention requirements.

09. How we protect information

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, alteration or disclosure. Measures are selected according to the type of information, the purpose of processing and the risks involved.

Depending on the systems in use, safeguards may include access controls, restricted account permissions, secure communications, software updates, appropriate provider arrangements and procedures for handling information requests or suspected incidents.

No website or method of electronic transmission can be guaranteed to be completely secure. Please avoid sending unnecessary sensitive information through a general enquiry form or ordinary email. If we become aware of a personal data breach, we will assess it and take the steps required by applicable law, including notifying the relevant authority or affected individuals where required.

10. Your data protection rights

Depending on the circumstances and applicable law, you may have the right to:

• Access: request confirmation of whether we process your personal information and obtain a copy of information covered by your right of access.
• Rectification: ask us to correct inaccurate or incomplete information.
• Erasure: request deletion where the legal conditions for erasure are met.
• Restriction: ask us to restrict certain processing in circumstances provided by law.
• Objection: object to processing based on legitimate interests or another relevant basis where the law provides this right.
• Data portability: request certain information in a structured, commonly used and machine-readable format where the legal requirements apply.
• Consent withdrawal: withdraw consent for processing that relies on your consent, without affecting the lawfulness of earlier processing.

These rights are not absolute in every situation. For example, we may need to retain certain records to comply with a legal obligation or to establish, exercise or defend legal claims. If a right does not apply or an exception is relevant, we will explain this where required.

How to make a request

Email enquiries@greenfieldenquiries.services and explain the request. Please do not include identity documents unless we ask for proportionate verification information through an appropriate method.

We will respond without undue delay and normally within one calendar month of receiving a valid request. Where a request is complex or multiple requests have been made, applicable law may permit an extension of up to a further two months. If an extension is needed, we will notify you within the initial month and explain the reason. Where identity or other necessary information is reasonably required, the statutory time limit will be handled in accordance with the applicable rules.

We generally do not charge for handling a request. A reasonable fee or refusal may be permitted in limited cases where a request is manifestly unfounded or excessive, subject to the applicable legal requirements.

11. Cookies and website technologies

This website may use cookies or similar technologies that are necessary for core website functions, security or the operation of features you request. Other technologies, such as analytics or embedded third-party content, may be present depending on the website configuration.

Where consent is legally required for non-essential cookies or similar technologies, they should not be activated before the relevant consent has been obtained. You can use the website’s cookie controls, where provided, to manage your choices.

For further information about individual cookies, their purposes and any available settings, please refer to our Cookie Policy.

12. Children’s information

Our website is intended for people enquiring about health education consultations. We do not knowingly request unnecessary personal information about children through general website forms.

If a parent, guardian or other authorised person contacts us on behalf of a child, we will consider what information is genuinely needed, the authority of the person making the enquiry and any additional safeguards required by law. Please do not submit a child’s detailed health information unless it is necessary for a specific enquiry and an appropriate arrangement has been established.

If you believe a child has provided personal information that should not have been submitted, contact us so that we can review the circumstances and take appropriate action.

13. Changes to this policy

We may update this Privacy Policy when our website, service arrangements, information handling practices or applicable legal requirements change. The revised version will be published on this page and will apply from the time it is published, except where a different effective time is required by law or stated for a particular change.

If a change materially affects the way we process information already held, we will take any notification or consent steps required by applicable law.

14. Contact and complaints

If you have a question about this policy, wish to exercise a data protection right or have a concern about how your information has been handled, contact us using the details below. We will review the matter and respond in accordance with applicable requirements.

Making a complaint to the regulator

If you remain concerned about how your personal information has been handled, you may complain to the UK Information Commissioner’s Office (ICO). Further information and contact options are available at ico.org.uk. We would welcome the opportunity to consider your concern first, but you are entitled to contact the ICO directly.