Privacy Policy

1. Introduction

This Privacy Policy explains how EuroCareFinder collects, uses, stores, shares and protects personal information when you use our website, clinic directory, clinic profile pages, review features, contact forms, account features and related platform services.

EuroCareFinder is an online healthcare directory. We are not a clinic, hospital, healthcare provider, medical adviser, insurer, broker, payment intermediary or emergency service.

We aim to collect only the information reasonably needed to operate the platform, protect users and clinics, reduce abuse and provide directory features.

2. Who we are

EuroCareFinder is responsible for personal information collected directly through this website.

Contact email: contact@eurocarefinder.co.uk

Where a clinic receives an enquiry from you, that clinic is responsible for how it uses your information after receiving it. You should review the clinic’s own privacy information where available.

3. Important health information warning

EuroCareFinder contact forms are not intended for medical records, detailed health information or urgent medical requests.

Health information can be highly sensitive. You must not submit medical records, test results, scans, prescriptions, diagnosis details, treatment records, intimate images, passport copies, payment details, bank details or detailed health history through EuroCareFinder contact forms.

Our contact forms are intended only for initial, general enquiries, such as asking whether a clinic may offer a service or how to contact the clinic directly.

If a clinic requires medical information, you should ask the clinic directly how that information should be provided and whether the clinic offers a secure medical communication channel.

If you choose to include sensitive medical or personal information in a EuroCareFinder contact form despite these warnings, you do so against our stated instructions. We may delete such information without forwarding it where we consider this necessary for privacy, safety, security or legal reasons.

4. Information we collect

Visitors

When you browse EuroCareFinder, we may collect basic technical and usage information, such as IP address, browser type, device type, approximate location, pages viewed, referring pages, timestamps and interactions with the website.

Contact form users

If you submit a contact enquiry to a clinic through EuroCareFinder, we may collect your name, email address, message, the clinic you selected, the date and time of submission, technical security information and moderation status.

Clinics and practitioners

If you create, claim or manage a clinic or practitioner profile, we may collect information such as clinic name, contact name, email address, authentication details, specialty, description, address, city, country, website, map location, contact email, WhatsApp number, photos, practitioner information, services, prices, registration details, languages, profile settings and other information you choose to provide.

Reviews

If you submit a review, we may collect your reviewer name, country, rating, review text, date of submission, moderation status and technical security information.

Security and anti-abuse data

We may collect and process technical information needed to protect the platform from spam, bots, fraud, abuse, malicious activity and unauthorised access. This may include IP address, browser signals, bot verification results, timestamps, request metadata and moderation decisions.

5. How contact form moderation works

To protect clinics and users from spam, bots, fraudulent enquiries, abuse, malicious content and inappropriate submissions, contact enquiries submitted through EuroCareFinder may be reviewed before being forwarded to the selected clinic.

This review may include automated checks, bot protection, honeypot fields, abuse signals, security checks and manual review by EuroCareFinder.

During moderation, the enquiry may be temporarily stored in our moderation database for the minimum time reasonably needed to review it and decide whether to forward or reject it.

If the enquiry is approved, we forward it to the selected clinic and aim to delete the personal enquiry content from our moderation database after forwarding.

If the enquiry is rejected, for example because it appears to be spam, abusive, fraudulent, unsafe, irrelevant or contains prohibited information, we aim to delete the personal enquiry content from our moderation database after rejection.

We may keep limited non-content records, such as clinic ID, timestamp, status, security flags or basic analytics, where needed for abuse prevention, platform security, troubleshooting, legal protection or service analytics. These records are intended not to include the full enquiry message, patient message content or unnecessary personal details.

6. How we use your information

We use personal information for the following purposes:

• to operate, maintain and improve EuroCareFinder;
• to display clinic and practitioner profile information;
• to allow clinics to create, claim and manage profiles;
• to allow users to submit general enquiries to clinics;
• to moderate enquiries before forwarding them;
• to reduce spam, bots, fraud, abuse and malicious activity;
• to manage account registration, login and authentication;
• to moderate reviews before publication;
• to respond to support requests, complaints or legal issues;
• to protect the security and integrity of the platform;
• to comply with legal, regulatory and security obligations;
• to understand usage and improve user experience.

7. Lawful basis for processing

Where UK GDPR or similar data protection law applies, we rely on different lawful bases depending on the purpose of processing.

• Providing the platform: contract or legitimate interests, where processing is needed to provide account features, directory features, profile management or contact form functionality.
• Contact enquiries: consent and/or legitimate interests, where you voluntarily submit an enquiry and we process it to review and forward it to the selected clinic.
• Spam, bot and abuse prevention: legitimate interests, where processing is needed to protect users, clinics, EuroCareFinder and the integrity of the platform.
• Clinic profile publication: contract, legitimate interests and/or consent, depending on how the profile was created, claimed or submitted.
• Legal compliance: legal obligation, where we need to process or disclose information to comply with applicable law.
• Optional communications: consent or legitimate interests, depending on the type of communication and applicable law.

8. Special category health data

Health information may be special category data under data protection law. EuroCareFinder does not ask users to submit health records or detailed medical information through its general contact forms.

If you submit health information despite our warnings, we may temporarily process it only so far as necessary to identify, moderate, delete, reject or forward your enquiry, depending on the circumstances.

Where special category data is processed, we aim to minimise the amount processed, restrict access, avoid retaining it longer than necessary, and delete it where it is not needed or is inappropriate for the platform.

EuroCareFinder is not designed to be a secure medical messaging system. You should send medical records and detailed health information only through channels provided directly by your chosen clinic or healthcare professional.

9. Clinic profile information

Clinic and practitioner profile information is intended to be publicly visible on EuroCareFinder. This may include clinic name, practitioner names, specialty, profile description, location, website, services, prices, photos, contact details, Google review links and other information provided by the clinic or gathered from publicly available sources.

Clinics and practitioners are responsible for ensuring that information they submit is accurate, lawful, not misleading and does not include personal data they are not authorised to publish.

EuroCareFinder may use clinic profile information to operate, display, improve and promote the platform, including through directory pages, search pages, country pages, service pages, social media, email communications and marketing materials.

10. Reviews and moderation

Reviews submitted through EuroCareFinder may be moderated before publication. We may refuse, remove or hide reviews that appear false, abusive, spam-like, defamatory, discriminatory, irrelevant, promotional, unlawful, unsafe or inappropriate.

Reviews should not include private medical information about another person, confidential clinic information, threats, payment card details, passport details or sensitive health information.

Review content may remain visible while published. If a review is rejected or removed, we may delete it or keep limited records where necessary for abuse prevention, dispute handling or legal reasons.

11. Who we share information with

We may share personal information with:

• the clinic or practitioner you choose to contact;
• Supabase, which provides database, authentication and storage services;
• Resend, which helps send platform and enquiry emails;
• Vercel, which hosts the website;
• Cloudflare Turnstile or similar anti-bot/security services;
• map, analytics, logging, security and infrastructure providers;
• professional advisers where necessary;
• law enforcement, regulators, courts or authorities where legally required;
• successors or operators if EuroCareFinder is transferred, restructured or continued under a different operating arrangement.

Once an enquiry is forwarded to a clinic, the clinic becomes responsible for how it handles that information. EuroCareFinder does not control the clinic’s own systems, privacy practices, retention periods or security measures.

12. International transfers

Some of our service providers may process information outside the United Kingdom or the country where you live. Where required, we aim to rely on appropriate safeguards, such as contractual protections, adequacy arrangements or other lawful transfer mechanisms.

Because EuroCareFinder lists clinics in different countries, users may choose to contact clinics outside their own country. If you contact a clinic abroad, your enquiry may be sent to that clinic in another jurisdiction.

13. Storage and retention

We keep personal information only for as long as reasonably needed for the purposes described in this Privacy Policy, including operating the platform, maintaining accounts, displaying profiles, moderating enquiries, preventing abuse, resolving issues and complying with legal obligations.

• Contact enquiry content: stored temporarily for moderation. Approved enquiries are forwarded to the selected clinic and the personal enquiry content is intended to be deleted from our moderation database after forwarding. Rejected enquiries are intended to be deleted after rejection.
• Contact enquiry analytics: limited non-content records may be kept for operational analytics, abuse prevention and security monitoring.
• Clinic profile information: may remain visible while the profile is active or while we have a legitimate reason to keep it in the directory.
• Account data: may be kept while an account is active and for a reasonable period afterwards for security, legal, support or audit purposes.
• Reviews: may remain visible while published and may be removed or deleted if rejected, withdrawn or considered inappropriate.
• Security logs: may be kept for a limited period where needed to detect misuse, investigate abuse, protect the platform or comply with legal obligations.

Deletion may not be immediate in all technical systems, backups, logs or third-party services, but we aim to avoid retaining personal enquiry content longer than reasonably necessary.

14. Security

We take reasonable steps to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. These steps may include access controls, account authentication, database permissions, bot protection, moderation processes and use of reputable infrastructure providers.

However, no website, database, email system or internet transmission can be guaranteed to be completely secure. You should not submit information through EuroCareFinder that you would not want processed for the limited purposes described in this Privacy Policy.

If we become aware of a personal data incident requiring notification, we will take steps required by applicable data protection law.

15. Cookies and similar technologies

EuroCareFinder may use cookies, local storage and similar technologies to support website functionality, login sessions, security, preferences, abuse prevention and analytics.

Some technologies may be essential for the website to work properly. If we introduce non-essential analytics, advertising or tracking cookies requiring consent, we will update our approach and request consent where required.

16. Your rights

Depending on where you live and which law applies, you may have rights in relation to your personal information. These may include the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• request a copy of information you provided in a portable format where applicable;
• complain to a data protection authority.

You have the right to object to processing based on legitimate interests, including some types of security, analytics or platform improvement processing, where applicable.

To exercise your rights, contact us at contact@eurocarefinder.co.uk. We may need to verify your identity before responding.

17. Children

EuroCareFinder is not intended for use by children. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.

18. Complaints

If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue.

You may also have the right to complain to your local data protection authority. In the UK, this is the Information Commissioner’s Office.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.

Continued use of EuroCareFinder after this Privacy Policy is updated means you acknowledge the updated version.

20. Contact

If you have questions about this Privacy Policy or how EuroCareFinder handles personal information, contact us at contact@eurocarefinder.co.uk.