Privacy Policy & UK GDPR Compliance

1. Data Controller vs. Data Processor Roles

1.1 The Client as Data Controller: The clinic or medical practice is the Data Controller responsible for collecting patient consent on their website forms and establishing lawful bases under UK GDPR.
1.2 EightyFive as Data Processor: booking.eightyfive.cloud acts strictly as a Data Processor, executing the automated dispatch of consultation proposals solely on behalf of the registered Client.

2. Categories of Data Processed

To deliver the speed-to-lead service, the platform processes: • Prospective Patient Name and Mobile Telephone Number.
• Self-selected procedure interest (e.g. Dental Implants, Hair Restoration, Aesthetics).
• Clinic practice manager contact telephone for instant VIP alerts.
• Clinic legal and invoicing information (stored securely via Stripe).

3. WhatsApp End-to-End Encryption

All WhatsApp transmissions routed through the embedded Baileys protocol leverage Signal Protocol end-to-end encryption. Content exchanged between the Client's linked reception device and the patient's device remains encrypted in transit according to WhatsApp standards.

4. Data Retention & Deletion Rights

Client data is retained only for as long as necessary to maintain active service telemetry. Under UK GDPR Article 17, the Client or prospective patient may request immediate erasure ("Right to be Forgotten") of their inquiry log by contacting our Data Protection Officer.

5. Inquiries & Data Protection Contact

Data Protection Officer: Naghman
EightyFive Development
4 Crown Place, London EC2A 4BT, United Kingdom
Email: [email protected]