Legal

    Privacy policy

    1. Introduction

    Restora Clinic is committed to protecting your personal and health data. This policy explains how we collect, use, store, and share your information when you use our online insomnia assessment service.

    2. Data we collect

    We collect personal information including name, date of birth, contact details, and address. We also collect health data including your assessment responses, medical history, medication details, and clinical notes from our reviewing clinicians.

    3. How we use your data

    Your data is used to provide the clinical assessment service, enable clinician review, facilitate treatment and fulfilment if appropriate, communicate with you about your care, and comply with legal and regulatory obligations.

    4. Data storage & security

    All data is stored within the European Economic Area (EEA), hosted on secure servers in Ireland (AWS eu-west-1). This region is recognised as adequate for UK data transfers under the UK GDPR. All data is encrypted at rest and in transit using industry standard protocols. Access to patient data is strictly restricted to authorised clinical and operational staff through role based access controls.

    5. Your rights

    You have the right to access, correct, or request deletion of your personal data. You may also request data portability or restrict certain processing. To exercise these rights, contact us at support@restora.co.uk.

    6. Data retention

    [Placeholder for data retention periods in line with healthcare record keeping requirements.]

    7. Contact

    For any privacy related queries, contact our Data Protection Officer at dpo@restora.co.uk.