Who we are
NeuroLynk is the data controller for information collected through neurolynk.co.uk. You can contact us at privacy@neurolynk.co.uk.
Information we collect
- Enquiry details you submit: name, email, telephone if given, postcode, assessment type, whether the assessment is for an adult or a child, delivery preference, contact preference and any message you write.
- Account details for clinic users: name, work email and organisation membership.
- Usage information: pages viewed, searches run, comparisons made, referral clicks, approximate device type and the source that brought you to the site.
Why we use it and our lawful basis
- To pass your enquiry to the clinic you selected: consent, which you give on the enquiry form and can withdraw at any time.
- To operate, secure and improve the platform, and to produce aggregate statistics: legitimate interests.
- To meet legal, accounting and regulatory obligations: legal obligation.
How long we keep it
Enquiry records are kept for 24 months so we can resolve disputes and answer questions about a referral. Usage events are kept in identifiable form for 14 months and retained after that only in aggregate. Clinic account records are kept for the life of the listing and for six years afterwards for accounting purposes.
Where your information is held
Information is stored on servers in the United Kingdom or European Economic Area. Where a provider processes data outside the UK, we rely on adequacy regulations or the International Data Transfer Addendum.
Your rights
You have the right to access, correct, delete or restrict your information, to object to processing, to data portability, and to withdraw consent.
Security
Access to enquiry data is restricted to the clinic it was sent to and to authorised NeuroLynk staff. Data is encrypted in transit, access is logged, and administrative actions are recorded in an audit trail.