Pain Pathway

Privacy policy

Last updated 25 October 2026. Draft for legal review.

Who we are

Pain Pathway Marketing is a trading name of [Company legal name] (company number [Company number]), [Registered office address]. We are the controller of the personal data described here. ICO registration: [ICO registration number]. Contact: [privacy@painpathwaymarketing.com].

What we collect

We don't want health information about patients. Please don't send it.

Why we use it, and our lawful basis

Who we share it with

Our processors: HighLevel (booking calendar and CRM), Cloudflare (hosting and security), Google Workspace (email), and Meta (advertising measurement, only with your consent). Some are based in the US. Where data leaves the UK we rely on the UK–US Data Bridge or the ICO's International Data Transfer Addendum. We never sell your data.

How long we keep it

Booking and enquiry details: 24 months from our last contact, unless you become a client. Client records: 6 years after the contract ends, for tax and legal reasons. Consent records: as long as the consent applies, plus 2 years.

Your rights

You can ask to access, correct, delete or move your data, object to how we use it, or withdraw consent. Email [privacy@painpathwaymarketing.com] and we'll reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

US visitors

If you're in a US state with a consumer privacy law (such as California), you can ask what we hold, ask us to delete it, and opt out of the "sharing" of data for targeted advertising. Rejecting advertising cookies, or sending a Global Privacy Control signal, opts you out. We honour GPC automatically.