WEBSITE PRIVACY AND COOKIES POLICY

We are THE LATHBURY GROUP LTD, a private limited company incorporated in England and Wales. Our company number is 15291957 and our registered address is Mayfield House, 256 Banbury Road, Oxford, England, OX2 7DE.

("The Lathbury Group" / "we" / "our" / "us"). We are committed to ensuring that your privacy is protected. We comply with the Data Protection Act 2018 and the UK GDPR together with any other relevant data protection and privacy legislation (together "Data Protection Legislation"). We are the data controller of data you pass to us pursuant to this policy. Our Data Protection Officer can be contacted at hello@findaprivategp.co.uk.

This Privacy Policy together with our website terms and conditions and cookie policy sets out how we collect personal information from you and how the personal information you provide will be processed by us. By visiting the website at https://www.findaprivategp.co.uk/ (the "Website") you are accepting and consenting to the practices described in this Privacy Policy. If you do not consent, please do not submit any personal data to us.

What information does The Lathbury Group hold and how will we use it?

Information you give The Lathbury Group:

You may give us information about you by completing enquiry forms on the website or by requesting via the website that we send you marketing information. The information you give us may include your name, email address, address/location and phone number. For healthcare providers, we collect company information and details of staff members who will manage company accounts on our platform.

We will retain this information while we are corresponding with you or providing services to you or to the client you represent. We will retain this information for the duration of our business relationship plus 7 years for financial and tax records, or 3 years from last engagement for marketing information, unless you request that we delete it earlier.

Information The Lathbury Group collects about you:

The Lathbury Group may collect the following information from you when you visit the website:

• Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and
• Information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from the website (including date and time), products you viewed or searched for, page response times, website errors, length of visits to certain pages, page interaction information, methods used to browse away from the page and any phone number used to call our helpline

We retain this information for up to 26 months in line with analytics best practices.

Cookies

The website uses cookies to distinguish you from other users of the website. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy below.

Cookie Policy

Cookies are small text files which a website may put on your computer or mobile device when you first visit the website. The cookies will help the website recognise your device the next time you visit. Web beacons or other similar files can also do the same thing. We use the term 'cookies' in this policy to refer to all files that collect information in this way.

We use cookies to distinguish you from other users of the website. This helps us to provide you with a good experience when you use the website and also allows us to improve the services we provide to you.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are essential in order to enable you to move around the website and use its features, such as accessing secure areas of the website. Disabling them may mean you are not able to access parts of our website.
• Analytical or performance cookies. We use these cookies to collect information about how visitors use the website, for instance, which pages visitors go to most. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. Some of these cookies are known as analytic cookies which allow us to monitor website traffic using industry accepted third parties including Google Analytics 4 and PostHog.

The cookies we use include:

Third-party cookies

Most browsers accept cookies automatically, but you can change your cookie preferences by adjusting your browser settings to refuse the setting of all or some cookies if you prefer. You can usually do this by visiting the 'options' or 'preferences' menu on your browser. Please note, however, that if you do this and choose to block all cookies (including essential cookies), we cannot guarantee that your experience will be as fulfilling as it would otherwise be, and you may not be able to access all or parts of our website.

Where we collect personal data as part of our use of cookies on the website, we will do so in accordance with our Privacy Policy.

Use Made of the Information

We may use the information we receive and/or collect about you via the website to:

• Fulfil our obligations under any contract that we have entered into with you or with the Client that you represent, and to provide you or the relevant Client with information or services that you or the Client has requested
• Send you newsletters and marketing information if you have consented to us doing so
• Notify you of products and services that we feel may interest you, or permit third parties to do so if you have provided the appropriate consent
• Monitor website usage and provide statistics to third parties for the purposes of improving and developing the website and the services we provide via the website

The Lathbury Group processes personal information for certain legitimate business purposes, which include some or all the following:

• Where the processing enables The Lathbury Group to enhance, modify, personalise or otherwise improve the website, its services or communications
• To identify and prevent fraud
• To enhance the security of the network and information systems of The Lathbury Group
• To better understand how people interact with the websites of The Lathbury Group
• To administer the website and carry out data analysis, troubleshooting and testing; and
• To determine the effectiveness of promotional campaigns and advertising

If we obtain consent from you to do so, we may provide your personal details to third parties so that they can contact you directly in respect of services in which you may be interested.

Where we are processing personal data that we have obtained via the website on the basis of having obtained consent from you, you have the right to withdraw your consent to the processing of your personal data at any time. If you would like to withdraw your consent or prefer not to receive any of the above-mentioned information (or if you only want to receive certain information from us), please let us know by contacting us via our email at hello@findaprivategp.co.uk. Please bear in mind that if you object, this may affect our ability to carry out the tasks above for your benefit.

If you wish to have your information removed from our database or if you do not want us to contact you for marketing purposes, please let us know by clicking the 'Unsubscribe' option in any email we send to you and providing the details requested or by contacting us via email at hello@findaprivategp.co.uk and we will take steps to ensure that this information is deleted as soon as reasonably practicable.

We will not share, sell or distribute any of the information you provide to us (other than as set out in this policy) without your prior consent, unless required to do so by law.

Third Party Sites

Our website may contain links to third party websites, including websites via which you are able to purchase products and services. They are provided for your convenience only and we do not check, endorse, approve or agree with such third-party websites nor the products and/or services offered and sold on them. We have no responsibility for the content, product and/or services of the linked websites. Please ensure that you review all terms and conditions of website use and the Privacy Policy of any such third-party websites before use and before you submit any personal data to those websites.

How Safe is your Information?

Where we have given you (or where you have chosen) a password which enables you to access certain parts of the website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Protecting your security and privacy is important to us and we make every effort to secure your information and maintain your confidentiality in accordance with the terms of the data protection legislation. The website is protected by various levels of security technology, which are designed to protect your information from any unauthorised or unlawful access, processing, accidental loss, destruction and damage.

We will do our best to protect your personal data but the transmission of information via the Internet is not completely secure. Any such transmission is, therefore, at your own risk.

Disclosure of your Information

We may share your personal information with selected third parties including:

• Business partners, suppliers and sub-contractors for the performance of any contract we enter with them or you, including:
  • Fillout.com for form processing
  • Google Analytics 4 and PostHog for analytics
  • Stripe for payment processing
  • Prismic as our CMS
  • Airtable and Hero Health for data hosting

Please note, we may need to disclose your personal information where we:

• Sell any or all of our business or assets or we buy another business or assets in which case we may disclose your personal data to the prospective buyer or seller
• Are under a legal duty to comply with any legal obligation or to enforce or apply our terms and conditions; or
• Need to disclose it to protect our rights, property or the safety of our customers or others, including the exchange of information with other companies, organisations and/or governmental bodies for the purposes of fraud protection and credit risk reduction

Where we Store your Personal Data

All your personal data is stored within the UK or the EEA. While we don't directly transfer data outside of the UK/EEA, some of our data processors may do so. In those cases, we have audited these processors to ensure they comply with UK GDPR regulations with respect to international data transfers, including that they have appropriate safeguards in place.

Your Rights in Respect of your Data

You benefit from a number of rights in respect of the personal data we process about you. We have summarised your rights below and more information is available from the Information Commissioner's Office website. Your rights apply for the period in which we process your data. There are certain caveats and exemptions to those rights which mean that in some circumstances you may not be entitled to exercise them. If we believe that is the case upon receipt of a request from you, we will let you know.

1. Access to your data - You have the right to request a copy of the personal data that we hold about you.
2. Rectification of your data - You have the right to request that we correct any personal data that we hold about you which is incorrect or incomplete.
3. Right to be forgotten - You have the right to request that we erase the personal data we hold about you in certain circumstances.
4. Right to restrict processing - You have the right to request that we restrict the processing of your personal data in certain circumstances.
5. Data portability - You have the right to request that we transfer your personal data to you or to a third party in certain circumstances.
6. Right to object - You have the right to object to our processing of your personal data in certain circumstances, including for direct marketing purposes.

Your right to complain about our processing

If you have any complaints about our use of your personal data, please contact us. You also have the right to complain to the relevant supervisory authority in your jurisdiction. In the UK, the supervisory authority is the Information Commissioner's Office. Contact details for the ICO can be found at https://ico.org.uk/.

If you have any further queries or comments on our Privacy Policy, please contact us via email at hello@findaprivategp.co.uk.

Last Updated: March 2025