Privacy notice
This notice covers patientmemo.com, the marketing website. Last updated 28 August 2026.
The short version. This website has no analytics, no tracking pixels, no advertising and no cookies. It sets nothing on your device. The only personal data it handles is your server access log, and whatever you choose to tell us — either in the enquiry form on our contact page or in an email. The form posts to this website and nowhere else: there is no third-party form service behind it.
Who is responsible
PatientMemo is the controller for the personal data described here. You can reach us at patientmemo@protonmail.com for any question about this notice or to exercise any of the rights below.
What this website collects
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Server access logs. IP address, timestamp, page requested, browser user-agent | Created automatically by our hosting provider to serve the site, keep it secure and diagnose faults | Legitimate interests, for running and securing our own website | Held by our hosting provider under their retention schedule; we do not copy them out or analyse them |
| What you send through the enquiry form. Your name, work email address, organisation, the type of organisation and what your enquiry is about (both chosen from a short list), and the content of your message | To answer your enquiry and, if you ask for one, arrange a demonstration | Legitimate interests, for responding to a business enquiry you initiated | Until the enquiry is closed and for up to 24 months afterwards, then deleted |
| Two technical values recorded with a form submission. A one-way hash of your IP address, and your browser user-agent | To stop the same connection submitting the form repeatedly. The hash cannot be turned back into your IP address | Legitimate interests, for keeping our own form usable | Deleted with the enquiry it belongs to |
| Anything you email us. Your name, email address, organisation and the content of your message | To answer your enquiry | Legitimate interests, for responding to a business enquiry you initiated | Until the enquiry is closed and for up to 24 months afterwards, then deleted |
The enquiry form
Our contact page carries a form. It asks for your name, work email address, organisation, the type of organisation, what your enquiry is about, and your message. It is entirely optional — emailing us instead reaches the same place.
The form posts to this website and to nothing else. There is no Formspree, HubSpot, Typeform, Google Form or any other embedded service behind it: the page sends what you type to a script on patientmemo.com, which stores it on the same server and emails it to us. No advertising network, analytics provider or form platform sees it, because none of them is involved.
Please do not put patient-identifiable information in it. The form says so above the message box. It is a business enquiry channel, not a clinical one, and we have no lawful basis to hold patients’ details.
The form sets no cookie and needs no login. To keep automated submissions down it uses a field hidden from people and a check on how quickly the form was completed — neither of which contacts anyone or tracks you. We deliberately do not use reCAPTCHA or any similar service, because that would send a request about your visit to a third party on the one page where it matters most that we do not.
Cookies and tracking
This website sets no cookies and uses no local storage, analytics, session recording, advertising or social media tracking. There is nothing to consent to, which is why you are not being shown a cookie banner.
No third parties
This site contacts no external service at all. Every file it needs is served from this domain, including its typefaces, which were previously loaded from Google Fonts. Nothing about your visit is disclosed to anyone else, because no other party is involved in delivering the page.
The enquiry form does not change this. It posts back to this same domain. The only onward journey your message makes is to our own mailbox, and that happens on our server after you have sent it — your browser never contacts anyone but us.
What we do not do
- We do not sell, rent or share your personal data.
- We do not use your data for automated decision-making or profiling.
- We do not add you to a mailing list because you emailed us or used the form.
- We do not use the form to build a prospect list, and we do not pass what you send to a CRM or sales tool.
The PatientMemo app is separate
This notice covers the marketing website only. The PatientMemo patient app is deployed under each customer organisation’s own branding, and that organisation is the controller for its own patients’ information. The app carries its own privacy information, which the organisation publishes. If you are a patient with a question about an app your clinic gave you, please contact that clinic.
Where data is held
This website is hosted in the United Kingdom, and form submissions are stored on that same server. Emails you send us, and the copy of a form submission that is emailed on to us, are held in a mailbox in the United Kingdom or the European Economic Area. Nothing about your visit leaves this site, so there is no other transfer to describe.
Your rights
Under the UK GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on legitimate interests, you can object at any time. Email patientmemo@protonmail.com and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, or by calling 0303 123 1113. We would appreciate the chance to put things right first.
Changes to this notice
If we add anything to this website that collects data, such as a booking tool or analytics, we will update this notice before it goes live and change the date at the top. The enquiry form described above was added on 28 August 2026, and this notice was rewritten for it before the form was published.