Who controls your information
The data controller is mm trading as Earwax Finder. Privacy enquiries can be sent to hello@earwaxfinder.co.uk.
What this site collects
Booking requests collect your name, email, phone number, postcode, preferred appointment timing and contact preference. Clinic claim requests collect representative and business details. Clinic billing records include the billing email, accepted pricing terms, monthly lead limit, charge status and related booking reference. Correction requests collect your name, email, the affected page and the information you ask us to review.
Why it is used
The information is used to process the request, verify clinic claims, prevent misuse and maintain an operational record. The public forms are deliberately designed not to collect symptoms or medical history.
The lawful basis is taking steps at your request where you ask for a booking, and legitimate interests in operating an accurate directory, responding to claims or corrections and preventing misuse. You can object to legitimate-interests processing by contacting the privacy address above.
Booking requests
Submitting a request does not confirm an appointment. A clinic must confirm availability and carry out its own clinical screening. Do not submit medical details through the directory form.
Sharing
Booking contact details are shared only with the selected clinic and service providers needed to operate the directory. Claims and correction details are shared only where needed to verify the request, resolve the issue or comply with law. Provider websites and external booking systems operate under their own privacy notices.
When you choose postcode-radius search, the postcode is sent to Postcodes.io to obtain approximate coordinates. Your name, email and phone number are not sent with that lookup.
Analytics
During a browser session, Earwax Finder keeps a first-touch traffic category such as direct, organic search, referral or paid campaign. The record can include campaign parameters, an advertising click ID, the landing-page path and the referring site's origin. It does not store a search phrase or full referring page. Until you accept optional analytics, it is held only in the current page's memory. If you accept, it can also be kept in session storage so it survives page loads. If you submit a booking request, the attribution is saved with that request so we can measure which directory journeys result in enquiries.
Earwax Finder also keeps daily aggregate counts of listing appearances, profile views, clinic website or phone clicks, booking-form opens and completed requests. These operational counters contain the clinic, event type, date, page context and a broad source category only. They do not contain an IP address, user agent, patient identity or the full referring URL and are used to operate the directory and report value to clinics.
Optional Google Analytics helps us understand visits, page use and broad traffic sources, including whether a directory search resolved and how many results it returned. Exact town and postcode input is not sent in that search event. Google Analytics is not loaded unless you accept analytics. We do not enable advertising personalisation, and your choice is stored in your browser so the site can remember it.
Google may process analytics information outside the UK under its own privacy safeguards. You can refuse analytics and still use every directory feature, or change your choice at any time.
Retention
Booking requests are retained for up to 12 months. Clinic claims and directory corrections are retained for up to 24 months so decisions can be audited. Security logs are normally retained for up to 90 days. Aggregate listing counters are retained for up to 25 months, and operator audit records for up to 36 months. Records may be kept longer where required to handle an active dispute, prevent fraud or meet a legal obligation. Billing agreements, charges and invoice references are retained for the applicable accounting, tax, dispute and legal record-keeping period.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or object to processing. You may also complain to the UK Information Commissioner's Office. Identity may need to be checked before a request is completed.
Directory corrections
Use the correction and removal form to report inaccurate listings. Do not include symptoms, medical history or another person's private information.