Booking privacy
Who handles your information
HEALTH CARE SERVICES LTD, trading as Earwax Removal Expert, arranges mobile earwax-removal visits in Maidstone and Mid Kent. Contact James at earwaxremovalexpert@gmail.com or 07459 682601.
What the booking website uses
Your name, email, phone number, visit address, postcode, preferred time and booking status are used to arrange your requested visit and send booking messages. The fact that you request ear care can reveal information about your health. The screening answers are used on your device to guide the next step; they are not sent or stored with your booking. Please do not put medical details in the contact or address fields.
We record the wording version and time of your explicit health-data consent, and any withdrawal. Booking administration uses the steps you ask us to take towards providing a service (UK GDPR Article 6(1)(b)); health information in the booking context uses your explicit consent (Article 9(2)(a)). This choice is separate from consent to treatment. Clinical records are handled separately.
Your consent choice
The health-data consent box is unticked until you choose it. If you prefer not to use online booking, call James to discuss information handling before sharing health details. Withdraw online-booking health-data consent using the private link in your booking email, or contact James. Withdrawal stops further booking emails and cancels a future online booking. It does not undo earlier processing or automatically remove records that must be retained for another valid purpose.
Hosting and booking messages
OpenAI Sites hosts the website using Cloudflare infrastructure. Resend sends booking emails. Google Gmail holds messages in the business inbox. OpenAI processes hosted booking data under its Sites data-processing terms, which include standard contractual clauses and the UK Addendum for relevant international transfers. Resend stores message content and delivery logs in the United States; choosing an Ireland sending region does not change that storage location. Its data-processing terms include UK transfer safeguards. Google handles Gmail information under its privacy policy. The inbox account arrangements and hosting log and backup expiry remain under review.
The website takes no payment and collects no payment-card details. Your booking email contains a private link: keep it safe, because it lets the holder view or cancel the booking. The appointment list is restricted to James's authorised account.
How long information is kept
The agreed policy is 30 days after an ordinary enquiry is closed, or after a booking is cancelled where no treatment or clinical advice was provided. James reviews eligible cancelled bookings before deleting the website record and email queue. Related inbox messages require separate cleanup. Relevant unresolved complaint or dispute records are kept while needed and reviewed afterwards. Treatment-record retention follows the insurer's separate minimum requirements. Pending or past confirmed bookings need review to establish their purpose; the website does not automatically classify them as treatment records.
Cookies and tracking
Optional Google Analytics and Google Ads measurement is off until you choose Allow measurement. It helps measure public page visits, appointment requests and calls attributable to ads. Google receives technical visit and event information, which can include cookie identifiers, device/browser information and IP address. We do not send names, email addresses, phone numbers, visit addresses, booking references, private management links or screening answers to these tools. Private booking management, owner administration and rehearsal pages have no added measurement tags. Enhanced conversions, Google Signals and advertising personalisation are disabled. Use Cookie settings on a public page to change your choice; rejecting optional measurement does not affect calling or booking. Your choice is remembered for up to 180 days. Google measurement cookies may be used after acceptance. Read Google’s privacy policy. Hosting and owner sign-in may use essential security mechanisms.
Requests about your information
Contact James to ask about access, correction, deletion, restriction, portability or consent withdrawal. We may need proportionate information to check your identity. We respond without undue delay, normally within one calendar month, subject to the applicable rules for identity checks, clarification and permitted extensions. Which rights apply depends on the processing and any applicable exceptions. You can also raise a complaint with the Information Commissioner's Office.
Updated 7 October 2026.