Privacy Policy

Who we are

This website and the My DDO account area are operated by Digital Doctors Online Ltd, a company registered in England and Wales (company number 16464633), registered office Flat 11 Strata House, 14-16 Christchurch Road, Bournemouth, England, BH1 3NJ. We are the data controller for the personal data described in this policy.

Contact: contact@digitaldoctorsonline.com, 07565 611154.

The personal data we process, and why

Contact form

When you use our contact form, we collect your name, email, phone number, the service you're asking about, and your message. This is sent to Netlify Forms (our website hosting provider's built-in form-handling service), which forwards it to our own inbox (contact@digitaldoctorsonline.com). We use this to respond to your enquiry. Lawful basis: legitimate interests (responding to enquiries you've chosen to send us), or steps taken at your request prior to entering a contract, depending on what you've asked us.

My DDO account

If you create a My DDO account, we (through our headless connection to Wix, our website and member-account platform) hold your first name, last name, login email, phone number (if you add one), and a password (stored and verified by Wix — we never see or store your password ourselves). Creating and managing your account uses your login session (see the cookie table in our Cookie Policy). Lawful basis: performance of a contract (running your account) and legitimate interests (keeping your account secure).

Orders and the shop

Our product catalogue, cart and checkout are provided by Wix (Wix Stores and Wix eCommerce). When you check out, you leave this site and complete payment on a Wix-hosted checkout page, which collects your delivery address and payment details directly — we do not receive or store your card details ourselves. Lawful basis: performance of a contract (fulfilling your order).

We do not currently show your past orders inside My DDO. If you need details of a past order, please contact us and we'll look it up.

Google Reviews

Our homepage displays a live feed of our public Google reviews, fetched from the Google Places API. This call happens on our server, using our own API credentials — it does not use or share any of your personal data, and no cookie or tracking technology is set on your device by this feature.

Support and privacy-rights requests

If you contact us through My DDO's Support page, or to exercise any of the rights below, we process whatever information you give us in that request in order to respond to it. We do not yet have an automated system logging privacy-request history — requests are currently handled manually by our team.

Technical and session data

To keep you signed in and your cart working, we set a small number of strictly-necessary cookies — see the full list in our Cookie Policy. Our hosting provider (Netlify) and Wix may, as standard for any website, log technical information such as IP address and browser type as part of normal server operation and security — we do not separately collect or use this ourselves.

Who we share your data with

The organisations that process personal data on our behalf, or that you interact with directly through our site, are:

• Wix.com Ltd — our website platform, member-account system, product catalogue and checkout provider
• Netlify, Inc. — our website hosting provider, including the Netlify Forms service our contact form uses
• Google LLC — solely for retrieving our public Google reviews via the Google Places API (see above); we do not use Google Analytics or any Google advertising product

We do not use Meta/Facebook advertising tools, Instagram remarketing, or Calendly — if you have seen these mentioned on an older version of this policy, that is out of date and has been corrected here. We do not sell or rent your personal data to anyone.

International transfers

Wix, Netlify and Google may process data outside the UK as part of their own global infrastructure. Where this happens, we rely on the safeguards those providers have in place (such as their own compliance with UK adequacy regulations or standard contractual clauses) — the specific safeguard each provider currently offers can change over time, and we keep this page up to date with what's actually in place.

How long we keep your data

• Contact form enquiries: kept for as long as reasonably needed to handle your enquiry and any follow-up, then deleted
• My DDO account data: kept for as long as your account is active, until you ask us to delete it (subject to the retention exceptions below)
• Order/billing records: typically 6 years, in line with standard UK tax/accounting record-keeping requirements
• Login session cookies: see exact lifetimes in our Cookie Policy

Your rights

Under UK data protection law, you can ask us to:

• Give you a copy of the personal data we hold about you
• Correct inaccurate or incomplete data (you can also update your name and phone number directly in My DDO)
• Delete your data, where this applies — this isn't automatic or unconditional; we may need to keep certain records for legal or accounting reasons even after a deletion request, and we'll explain clearly what we can and can't delete
• Restrict how we use your data in certain circumstances
• Object to us processing your data for a particular purpose
• Receive a copy of your data in a portable format, where this applies

You can make any of these requests by contacting us, or through My DDO's Privacy & Data page if you have an account. We may need to verify your identity before acting on a request, and some requests have legal limits we'll explain if they apply.

Direct marketing

You have an absolute right to object to your data being used for direct marketing, at any time, without needing to give a reason. If you object:

• We stop using your data for direct marketing straight away
• This is separate from deleting your account or your data generally — it doesn't remove records we need for other reasons, such as fulfilling an order or a legal obligation
• We keep a minimal record that you've opted out, specifically so we don't accidentally market to you again later — this suppression record is not itself used for marketing, and using your account afterwards does not put you back on any marketing list

We do not currently operate any active marketing channel (no email newsletter, no ad remarketing) — this section describes the right as it would apply if and when we do. See our Marketing Preferences page.

Automated decision-making

We do not use any automated decision-making or profiling that has a legal or similarly significant effect on you.

Complaints

If you're unhappy with how we've handled your data, please contact us first — we want the chance to put it right. You can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint.

Changes to this policy

We'll update this page if how we process your data changes, and update the date at the top when we do.