Privacy policy

Who we are

Bitewing is a trading name of Alan Cheng, a sole trader based in Durham, UK. We are the data controller for the personal information described here. You can contact us at alan@bitewing.co.uk or write to [Address for correspondence]. ICO registration number: [ICO registration number].

What we collect

• When you request an audit: your name, role, practice name, practice website, email address, and, if you choose to give them, your phone number, what you’d like help with and any notes.
• When you send a message: your name, email address, practice name if given, and your message.
• When you book a call: the details you enter on our booking page, which is run by Calendly.
• When you visit the site: our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security. We don’t use analytics or advertising cookies.

How we use it, and why we’re allowed to

• Replying to your message or preparing your audit: steps you’ve asked for before any contract, and our legitimate interest in answering enquiries.
• Following up once about your audit: legitimate interests. You can tell us to stop at any time.
• Delivering work for clients, and invoicing: contract.
• Keeping financial records: legal obligation.

We never sell your information, and we won’t add you to a newsletter unless you ask to join one. Your audit is based only on information that is publicly visible about your practice.

Who we share it with

We use a small number of trusted services to run Bitewing: Google Workspace (email), SiteGround (website hosting) and Calendly (call booking). Some of these providers may process data outside the UK; where they do, they use safeguards recognised under UK data protection law.

How long we keep it

If an enquiry doesn’t lead to work together, we delete your details within 24 months. If you become a client, we keep your details for as long as we work together and then for 6 years, as required for tax records.

Patient data

When we run email campaigns for a client practice, the practice remains the controller of its patients’ data and we act as its processor under a written data processing agreement. We only use the data the practice chooses to share, and only for that practice’s campaigns.

Your rights

You can ask to see the information we hold about you, ask us to correct or delete it, object to how we use it, or ask us to limit its use. Email alan@bitewing.co.uk and we’ll respond within one month.

If you’re unhappy with how we’ve handled your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Changes

We’ll update this page if anything changes, and show the new date at the top.