Privacy Policy

Who we are

Penydarren provides AI visibility consultancy for UK aesthetic clinics. You can contact us about this policy or any data request at tprujean@penydarren.com.

• Penydarren Ltd, registered in England & Wales, company number 17277827.

What we collect

We only collect information you choose to give us, plus basic technical data needed to run the site:

• ·Visibility checker — the clinic name or website address you enter. This is used to look up results in our research dataset and is not, by itself, personal data unless the domain identifies an individual.
• ·Review request form — your name, clinic name, clinic website and email address.
• ·Technical data — standard server logs (such as IP address, browser type and pages requested) generated by our hosting provider for security and reliability.

We do not collect special category data, and the site is intended for business (clinic) contacts rather than patients.

How and why we use it

We use the information to:

• ·respond to your enquiry and prepare the AI visibility review you request;
• ·provide, secure and improve the website and our services;
• ·keep reasonable records of our business communications.

Our lawful bases under UK GDPR are your consent (when you submit a form), our legitimate interests in responding to business enquiries and running the site, and, where we go on to work together, the performance of a contract. We do not sell your data or use it for automated decisions that produce legal effects.

Who processes it for us

We use trusted service providers who process data on our behalf under contract: Supabase (database hosting for form submissions, hosted in the EU region) and Vercel (website hosting and delivery). We do not share your information with anyone else except where required by law.

Where it is stored

We aim to keep data hosted within the UK or EU. Where a provider processes data outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or equivalent protections.

How long we keep it

We keep enquiry and review-request data for as long as needed to respond and to maintain reasonable business records, after which it is deleted or anonymised. You can ask us to delete your data sooner at any time.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict or object to our use of your personal data, and to data portability. To exercise any of these, email tprujean@penydarren.com. You also have the right to complain to the Information Commissioner’s Office (ICO), though we’d welcome the chance to resolve any concern first.

Cookies

The site does not use tracking or advertising cookies. See our Cookie Policy for details.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.