Privacy policy

Last updated 25 October 2026.

The short version

Nothing you write in the organiser or the tracker is ever sent to us. When you buy, we keep only what we need to deliver your files and meet our legal obligations. This website uses analytics cookies only if you accept them, never advertising cookies, and we don’t sell or share your data for marketing.

Who is responsible for your data

HuBelor Limited (company number 17497104) is the data controller. Registered office: Hallmark House, 25 Downham Road, Ramsden Heath, Billericay, CM11 1PU. Contact: our contact form.

What we collect and why

  • Your email address, so we can send your download link and help if something goes wrong (to perform our contract with you).
  • Order details: the amount, date, the Stripe reference for your payment, and the time you agreed to immediate access (to perform our contract, and to keep accounting records as the law requires).
  • Messages you send us through the contact form: your email address and your message, so we can deal with it (our legitimate interest in handling enquiries). To stop spam, we also keep a scrambled code made from your IP address (not the address itself), and delete it after a day.
  • The postcode or town you type into the clinic finder: our server sends it to postcodes.io (a free service run by Ideal Postcodes) to find where it is, so we can sort clinics by distance. We don’t store it, but it’s in the web address of your results, so it appears in our server logs (below). The directions buttons open Google Maps with your starting point filled in; from then on Google’s own privacy policy applies.
  • Your location, only if you choose “Use my current location”: your browser asks your permission first. We use your position, rounded to about 100 metres, in the same way as a postcode: to sort clinics by distance and as the start of the directions. It isn’t sent to postcodes.io, and we don’t store it, but it’s in the web address of your results and so in our server logs.
  • Server logs: like most websites, our web server records each request (your IP address, the page, the time and your browser) to keep the site secure and fix faults (our legitimate interest). Our hosting company keeps these logs for a limited period and then deletes them.

We don’t collect anything about your health or treatment. Please don’t include health details when you contact us.

Payments

Payments are handled by Onelink, the merchant-of-record service run by Stripe. On its secure payment page Onelink collects your payment details, name and billing country or postcode, so it can take payment, work out tax where you live and send your receipt. It does this under its own privacy policy, which is linked on the payment page. We never see your full card details. Stripe shares your email address and the payment status with us so we can deliver your files.

Analytics cookies, only if you accept

If you choose Accept on the cookie banner, we use Google Analytics to see how many people visit and which pages they find useful. If you choose Reject, or don’t choose, Google Analytics doesn’t load and no analytics cookies are set.

  • What it collects: the pages you view and how you use them (such as scrolling, the links you follow to other websites and whether you use a form, but never what you type), your approximate location (town or country, worked out from your IP address, which Google Analytics doesn’t store), your device and browser, and the website that sent you here.
  • Cookies: _ga and one starting _ga_, which last up to 13 months.
  • Not for advertising: Google signals and advertising features are switched off, so the data isn’t used for adverts or linked to your Google account. We keep it for 2 months.
  • Never on private pages: analytics doesn’t run on your download page or the thank-you page, and the page addresses it records leave out anything you typed into a search, such as your postcode.
  • Google: Google provides Google Analytics to us and processes this data on our behalf. It may be processed outside the UK, including in the USA, with legal safeguards in place.
  • Your choice: our legal basis is your consent. Change your mind at any time with “Cookie settings” at the bottom of every page; choosing Reject deletes the analytics cookies. Your choice is remembered in your browser and isn’t sent to us.

Hosting and email

Our website, its database and our email are hosted in the UK by 20i Limited, which processes the data above on our behalf.

Fonts

The fonts on this website are stored on our own server, so your browser doesn’t contact Google or any other font service when you visit.

How long we keep it

We keep order records for six years after the end of the financial year, as UK tax law requires. Download links stop working after 30 days. Contact form messages reach us by email, and we keep them only as long as we need to deal with them.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Contact us and we’ll reply within one month, as the law requires. If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.