This notice explains how Webicious Ltd uses personal information, in plain English. We collect as little as we can, keep it only as long as we need it, and never sell it.
Webicious Ltd is the controller for the personal information described in this notice. We are registered in England and Wales, company number [company number], with our registered office at [registered office address]. We are registered with the Information Commissioner’s Office, registration number [ICO number]. You can contact us about privacy at [[email protected]]
We collect your name, email address, practice name, website address, type of practice and anything you choose to write. We use it to send your report and reply to you. Our lawful basis is our legitimate interest in responding to enquiries. We do not add you to a mailing list.
We collect the contact and billing details of the people we work with at your practice. We use them to provide our service, send invoices and keep records. Our lawful bases are performance of our contract with you and compliance with our legal obligations, such as keeping accounting records.
We sometimes write by post to healthcare practices we think may benefit from our service. We use business information that is publicly available from official registers such as the Care Quality Commission, Companies House, NHS organisation data and RQIA, together with the practice’s own public website. Our lawful basis is our legitimate interest in telling practices about our service. We do not buy marketing lists. If you would prefer us not to write to you, email us and we will stop straight away.
We use cookieless analytics to count visits and see which pages are useful. It does not use cookies and does not identify you. Our security provider, Cloudflare, processes technical information such as IP addresses to protect the website from attacks. See our cookie statement for details.
We never sell personal information. We use a small number of trusted suppliers to run our business, each bound by a written contract:
Some suppliers, including Cloudflare, may process information outside the UK. Where they do, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Addendum or an adequacy decision.
When we host a practice’s website, the practice is the controller of any personal information collected through it and we act as its processor under a signed data processing agreement. If you are a patient, please read your practice’s own privacy notice or contact the practice directly.
You have the right to ask for a copy of your information, to have it corrected or deleted, to restrict or object to how we use it, and to ask us to transfer it. To use any of these rights, email [email protected]. We will respond within one month.
You have the right to complain to us about how we have handled your personal information. Email [email protected], or write to us at our registered office. We will acknowledge your complaint within 30 days, look into it, and tell you what we have done. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Last updated: October 2026
Send us your website address and we’ll email you a short, plain-English report: how it performs on a phone, how accessible and secure it is, and how easily patients and Google can find what matters. It’s free, there’s no obligation, and nobody will phone you.
We reply by email within two working days. Or ask us a question
