Privacy Policy | Qrolic Health

1. Who We Are

Qrolic Health is a healthcare web design agency and part of Qrolic Technologies. We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy explains how we collect, use, and safeguard your personal information when you visit our website or contact us.

2. Data We Collect

We may collect the following types of information:

Contact information - name, email address, phone number, and company name when you fill out our contact form or request an audit.
Technical data - IP address, browser type, operating system, referring URLs, and page interaction data collected via Google Analytics and Microsoft Clarity.
Communication data - any information you provide when you email us or communicate through our contact forms.

3. How We Use Your Data

We use your data for the following purposes:

To respond to enquiries and provide information about our services.
To improve our website through analytics and user behaviour insights.
To comply with legal obligations, including data protection regulations.
To send relevant communications if you have opted in (you may opt out at any time).

4. Legal Basis (GDPR / UK DPA)

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we process your data based on the following lawful grounds:

Consent - where you have provided explicit consent (e.g., contact form submissions).
Legitimate interest - for analytics and website improvement, where our interest does not override your privacy rights.
Legal obligation - where we are required to retain or disclose data by law.

5. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers who assist us in operating our website and business (e.g., Google Analytics, Microsoft Clarity, Formspree). These providers are contractually bound to protect your data and process it only in accordance with our instructions.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 24 months. Analytics data is retained for 26 months in accordance with Google's data retention policy.

7. Your Rights

Under UK GDPR, you have the following rights:

Right to access - request a copy of the data we hold about you.
Right to rectification - request correction of inaccurate data.
Right to erasure - request deletion of your data (subject to legal obligations).
Right to restrict processing - request limitation of how we use your data.
Right to data portability - request transfer of your data to another service.
Right to object - object to processing based on legitimate interest.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses cookies and similar tracking technologies. These include functional cookies (required for site operation) and analytics cookies (to understand how visitors interact with the site). You can control cookie preferences through your browser settings. Blocking cookies may affect certain functionality of the site.

9. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. This includes encryption in transit (TLS), secure hosting, and access controls. However, no method of electronic storage or transmission is 100% secure.

10. Contact

If you have questions about this policy or wish to exercise your data rights, please contact us:

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.