How we look after your information

The Tinnitus Guy is led by Nasir Rashid, a specialist audiologist. This policy explains what personal information we collect when you use this website or book an appointment, why we collect it, and what rights you have over it. We take this seriously — not just because the law requires it, but because some of what you tell us is about your health.

Who we are

The Tinnitus Guy (Nasir Rashid) is the “data controller” for the personal information described in this policy. If you have any question about it, contact us at admin@thetinnitusguy.com or 0121 517 1140.

What we collect, and why

We collect information in two places on this site:

• Contact and “register interest” forms. Your name, email address, phone number and any message you write. We use this to reply to your enquiry and, where you’ve asked, to let you know when a service becomes available.
• Booking a consultation. When you book online or by phone, our booking system (Amelia) stores your name, contact details, and details of the appointment itself — including, where relevant, information about your ears, hearing or tinnitus that you or Nasir record as part of your care.

Health-related information is treated as a “special category” of data under UK GDPR, which gets extra protection. We only collect and use it to provide you with clinical care, and we rely on the lawful basis of providing healthcare, alongside your consent when you book an appointment.

For general enquiries that aren’t about booking an appointment, our lawful basis is your consent (you chose to contact us) and our legitimate interest in responding to people who reach out to us.

Who your information is shared with

We don’t sell or share your information with anyone for marketing purposes. It is processed by the trusted tools we use to run the clinic:

• Amelia — our booking software, which stores appointment and customer records.
• Google Workspace — hosts our clinic email, so messages sent to us pass through it.

We only ever disclose personal information beyond this where we’re required to by law, or with your explicit consent — for example, if we need to correspond with another healthcare professional involved in your care.

How long we keep it

General enquiry messages are kept only as long as needed to deal with your enquiry. Appointment and clinical records are kept for longer, in line with the record-keeping standards expected of a registered healthcare professional, so that we can provide safe, ongoing care and meet our professional obligations to the HCPC and AHCS.

Cookies

This site uses a small number of cookies, described in full in our Cookie Policy.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal information we hold about you, and get a copy of it.
• Ask us to correct anything that’s inaccurate or incomplete.
• Ask us to delete your information, where we’re not required to keep it for clinical or legal reasons.
• Object to, or ask us to restrict, certain uses of your information.
• Withdraw consent at any time, where consent is the basis we’re relying on.

To exercise any of these, email admin@thetinnitusguy.com. If you’re unhappy with how we’ve handled your information, you also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

Keeping your information secure

We use reasonable technical and organisational measures to protect the information you share with us, and we only work with providers (like Amelia and Google) who take data security seriously.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.