Last updated: 23/06/2026

About this policy

This Privacy Policy explains how Cured Click Ltd ("we", "us", "our") collects, uses, and protects personal data when you use our website at curedclick.com or interact with us.

We are committed to protecting your privacy and handling your data transparently and in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who we are

Cured Click Ltd is the data controller responsible for your personal data.

• Company number: SC787307

• Registered office: 1 Mounthooly Way, Aberdeen, United Kingdom, AB24 3ER

• Contact: info@curedclick.com

• ICO registration number:

For any privacy-related questions, contact us at info@curedclick.com.

What data we collect

We collect the following types of personal data:

Information you provide directly:

• Name, email address, phone number, job title, and pharmacy name when you contact us, request a demo, sign up for our newsletter, or create an account

• Information you provide in messages, support requests, or feedback

• Billing and payment information when you become a customer

Information collected automatically:

• Device and browser information (type, version, operating system)

• IP address and approximate location (country/city level)

• Pages visited, time spent, referring website, and interaction data

• Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties:

• Publicly available information (e.g. from LinkedIn or pharmacy directories) for business outreach

• Information from our analytics and marketing platforms (e.g. HubSpot, Google Analytics)

Note on patient data: This policy covers personal data we collect about website visitors and pharmacy contacts. Patient data processed through the Cured Click platform is governed by separate Data Processing Agreements between Cured Click and each pharmacy customer.

How we use your data

We use your personal data for the following purposes:

You can withdraw consent for marketing communications at any time by clicking "unsubscribe" in any email or emailing info@curedclick.com.

Who we share data with

We share personal data with the following categories of recipients:

• Service providers who help us operate our business, including hosting (Framer), CRM and email (HubSpot), analytics (Google Analytics), and payment processing

• Professional advisors including lawyers, accountants, and auditors where necessary

• Regulatory bodies and law enforcement where required by law

• Potential buyers or investors in the event of a business sale or restructure, under appropriate confidentiality

We do not sell your personal data to third parties. We require all service providers to handle your data in line with UK GDPR.

International data transfers

Some of our service providers are based outside the UK. Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, including:

• Transfers to countries with a UK adequacy decision

• Standard Contractual Clauses approved by the UK Information Commissioner

• The UK International Data Transfer Addendum

You can request details of the safeguards by emailing info@curedclick.com.

How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy:

• Enquiries and demo requests: up to 2 years after last contact

• Customer accounts: for the duration of the contract and 7 years after termination (for tax and legal reasons)

• Marketing contacts: until you unsubscribe or 3 years of inactivity

• Website analytics: up to 26 months

• Legal and financial records: 7 years after the end of the financial year

After these periods, we securely delete or anonymise your data.

Your rights

Under UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you

• Rectification — ask us to correct inaccurate or incomplete data

• Erasure — ask us to delete your data ("right to be forgotten")

• Restriction — ask us to limit how we use your data

• Objection — object to our processing, including for marketing

• Portability — receive your data in a structured, machine-readable format

• Withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email hello@curedclick.com. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113. We would encourage you to contact us first so we can try to resolve any concerns directly.

How we protect your data

We use appropriate technical and organisational measures to protect personal data, including:

• Encryption of data in transit and at rest

• Access controls and authentication

• Regular security reviews and updates

• Cyber Essentials certification

• Staff training on data protection

No system is completely secure. We notify the ICO and affected individuals of personal data breaches where required by law.

Cookies

We use cookies and similar technologies on our website.

You can control cookies through your browser settings and our cookie consent banner.

Children

Our website and services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at curedclick.com/privacy. Significant changes will be communicated by email or a prominent notice on the website.

Contact

For any questions about this policy or how we handle your data:

• Email: info@curedclick.com

• Post: 1 Mounthooly Way, Aberdeen, United Kingdom, AB24 3ER