Privacy Policy

This intake tool is operated on behalf of the clinic whose page you accessed. The clinic is the data controller. We (the platform provider) act as a data processor on their behalf.

When you use this tool, we collect:

• Your name, email address, and optionally your phone number
• Your date of birth and biological sex — these are used only on your device to display the correct body model and are not transmitted to or stored by us
• Your answers to the intake questions (which relate to your musculoskeletal health)
• The body area you selected and any sub-regions

We collect this information to help the clinic understand your enquiry before your appointment. The lawful basis for processing is your explicit consent, which you provide before starting the questionnaire.

Health data is Special Category Data under UK GDPR Article 9, and is processed on the basis of your explicit consent (Article 9(2)(a)).

Your data is shared with:

• The clinic you submitted the enquiry to (via their secure dashboard and an email notification)
• Our hosting provider (Vercel) which processes requests on our behalf
• Our database provider (Supabase) where your submission is stored
• Our email provider (Resend) which delivers the clinic notification email

We do not sell your data or share it with any other third parties.

Our hosting provider (Vercel), database provider (Supabase), and email provider (Resend) may process data outside the United Kingdom. Where this occurs, transfers are made subject to UK GDPR-recognised transfer mechanisms — including standard contractual clauses, the UK–US Data Bridge, and the International Data Transfer Agreement (IDTA) — ensuring your data receives the same level of protection as it would within the UK.

Submissions are automatically deleted from our database 30 days after creation. Patients who complete the intake form typically book their appointment promptly, so longer retention is unnecessary and minimises data exposure.

Please note that at the point of submission a full copy of your assessment (including your name, contact details, body area, symptom answers, and triage result) is also sent to the clinic by email. That email, and any record the clinic creates from it, is held under the clinic's own retention policy and is not covered by the 30-day automatic deletion, which applies only to the copy stored in our database.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw your consent at any time
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact the clinic you submitted your enquiry to — as the data controller, the clinic can locate and action your request directly. If you need platform-level assistance (for example, deletion of your record from our database), you can also email privacy@entrivo.com.

Your data is transmitted over HTTPS and stored in a secure database. Access to patient data is restricted to authorised clinic staff via authenticated dashboards.

If you have questions about this policy or your data, please contact the clinic directly — their details are on the clinic website. For platform-level data queries, reach us at privacy@entrivo.com

This is a pre-appointment intake form. It does not provide a diagnosis, urgency assessment, or treatment recommendation. All clinical decisions are made by the clinic team.