Privacy Policy

1. Who we are

Cecil Amey Partnerships Ltd (“we”, “us”, “our”) is a company registered in England and Wales. We operate the website at cecilameypartnerships.co.uk and are the data controller responsible for any personal information you provide to us through this website or by contacting us directly.

We are committed to protecting your privacy and handling your personal data in an open and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What information we collect

We may collect the following categories of personal information:

• Contact information — your name, email address, telephone number and postal address, if you provide these when contacting us
• Professional information — details about your clinical background, GOC registration, employment situation, or business interests, where you share these as part of a franchise enquiry
• Correspondence — the content of any emails, messages or other communications you send to us
• Technical data — information about your device, browser and how you interact with our website, collected automatically via cookies and analytics (see section 7)

We do not collect any special category data (such as health information) unless you choose to share it voluntarily as part of your enquiry.

3. How we use your information

We use your personal information for the following purposes:

• To respond to your franchise enquiry and to have ongoing conversations with you about the opportunity
• To assess whether a franchise partnership may be a suitable fit for both parties
• To send you relevant information about the Cecil Amey Partnerships franchise model, where you have requested this
• To improve the content and performance of this website
• To comply with our legal obligations

4. Our legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Legitimate interests — to respond to your enquiry and manage our franchise recruitment process. We have carried out a legitimate interests assessment and are satisfied that our processing does not override your privacy rights.
• Contract — where processing is necessary for the performance of a contract or in preparation for entering into one
• Legal obligation — where we are required to process your data to comply with the law
• Consent — where you have given us explicit consent to contact you for a specific purpose. You may withdraw consent at any time.

5. Confidentiality of franchise enquiries

We understand that making an enquiry about a franchise opportunity is often a private matter. Many people exploring this opportunity are currently employed, working in a partnership arrangement, or simply not ready to make their interest public.

We treat all franchise enquiries with complete discretion. The personal information you share with us — including your name, contact details, clinical background and employment situation — will never be disclosed to any third party without your explicit prior consent, unless we are required to do so by law.

Our team handles all enquiry correspondence internally. We do not use any third-party sales organisations, lead-generation services or brokers who would have access to your personal information as part of our enquiry process.

6. Who we share your information with

We do not sell, rent or trade your personal information. We may share it in the following limited circumstances:

• Professional advisers — our franchise legal advisers or accountants, where strictly necessary and subject to confidentiality obligations, for example in the later stages of a franchise agreement process
• Service providers — technology providers who host or support our website (including WordPress.com / Automattic Inc.), subject to appropriate data processing agreements
• Legal requirement — where we are required by law, court order or regulatory authority to disclose information

Any third parties with whom we share personal data are required to keep it confidential and to use it only for the purposes for which it was shared.

7. Cookies and website analytics

Our website uses cookies — small text files stored on your device — to help the site function and to understand how visitors use it. We use the following types of cookies:

• Strictly necessary cookies — required for the website to function. These cannot be switched off.
• Analytics cookies — used to understand how visitors interact with the site. This data is aggregated and anonymised and does not identify individuals.

Our website is hosted on WordPress.com, which may set its own cookies. You can find more information about Automattic’s data practices at automattic.com/privacy.

8. How long we keep your information

We retain personal information only for as long as necessary for the purposes set out in this policy:

• Enquiry correspondence is typically retained for up to 3 years from the date of last contact, unless a franchise agreement is entered into (in which case longer retention periods apply)
• Where an enquiry does not progress, we will delete or anonymise your data upon request, or after a reasonable period of inactivity
• Website analytics data is retained in anonymised or aggregated form

9. Your rights

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right to rectification — to ask us to correct inaccurate or incomplete data
• Right to erasure — to ask us to delete your data in certain circumstances
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, machine-readable format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at emma.amey@cecilameypartnerships.com or write to us at 11 Church Street, Attleborough, Norfolk NR17 2AH. We will respond within one calendar month.

10. Transfers outside the UK

Our website is hosted on WordPress.com, operated by Automattic Inc., which may process data outside the United Kingdom. Automattic participates in the UK–US Data Bridge and implements standard contractual clauses where applicable. For further details, see Automattic’s privacy policy.

We do not otherwise transfer your personal data outside the UK.

11. Keeping your data secure

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or disclosure. Our website is served over HTTPS and hosted on a platform with enterprise-grade security. Access to enquiry correspondence is restricted to relevant members of our team.

No method of data transmission over the internet is entirely secure. If you have concerns about the security of your information, please contact us directly.

12. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection:

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you approach the ICO. Please contact us in the first instance at emma.amey@cecilameypartnerships.com.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will always be available at this address. Any material changes will be noted with a revised “Last updated” date at the top of this page.