Privacy policy.

What this policy covers, and what it does not.

This privacy policy covers personal data the specialistscale.com website collects from people who visit it. The booking form. The email correspondence that follows. The technical request data sent by your browser. The aggregate analytics. All of that sits under this policy.

It does not cover data we process on behalf of our clients. When a private medical practice engages us, the practice is the data controller for its patients' information. We are the processor. The practice decides how patient data is collected, used, and retained, and the terms are governed by the Data Processing Agreement signed at the start of every engagement. The practice's own privacy policy, not this one, governs that data.

Specialist Scale provides marketing services to private medical practices. We do not provide medical advice, and nothing on this website should be taken as medical advice.

What we collect.

Three categories of data are collected when you use this site. Each is named below, with what is in it.

Information you give us directly.

When you fill in the booking form on this site, you give us your name, your practice or domain, the specialty selection from the dropdown, and any optional message you choose to include. If you email us instead of using the form, we receive whatever you put in the email. That is the entirety of what you actively submit.

Information your browser sends automatically.

When any visitor loads a page on this site, our hosting provider receives a small amount of technical information that the browser sends as part of the request. This includes the IP address, the type of device and browser, the page being requested, and the referring page if there is one. This is normal web traffic data and is held in server logs by our hosting provider.

Aggregate analytics.

We use Fathom Analytics, a privacy-first analytics tool, to understand which pages on this site are visited and how often. Fathom does not place a cookie on your device. It does not assign you a persistent identifier. It does not follow you across other websites. The data it collects is aggregate and anonymous: counts, not identities. Fathom's own privacy practices are documented at usefathom.com/privacy.

How we use it.

Each category of data has a single purpose.

What you submit on the booking form is used to contact you about the consultation you requested. If you become a client, the same details get folded into the engagement record. If you do not become a client, we keep the form submission for as long as it is still useful to a future conversation, and no longer.

The technical request data in server logs is used to keep the site running, debug errors, and protect the site against malicious traffic. It is not used to profile you, to target advertising, or to inform any business decision other than keeping the website operational.

The aggregate analytics data is used to understand which pages on the site are working and which ones need to be rewritten. It informs no decision about you as an individual because it cannot. The data is anonymous by design.

What we rely on, and the safeguards we apply.

Lawful basis under UK GDPR. Booking-form submissions and email correspondence are processed on the basis of legitimate interests (responding to an enquiry you have initiated) or, if you become a client, on the basis of contract. Technical request data is processed on the basis of legitimate interests in operating the site securely. Aggregate analytics data is processed on the basis of legitimate interests in understanding which pages are working.

Where the data sits. Some of our processors operate outside the United Kingdom. Where they do, transfers are made under the UK International Data Transfer Agreement, the Addendum to the EU Standard Contractual Clauses, or equivalent adequacy regulations, as appropriate to the provider.

How it is kept safe. We use industry-standard encryption in transit and at rest, and we limit access to personal data on a need-to-know basis.

No automated decisions. We do not make solely automated decisions about you, and we do not profile you.

Who else sees the data.

A small number of third parties receive specific categories of data because they provide a service the site needs to run. Each is named below, alongside what they receive and why.

Cloudflare.

Our hosting and content-delivery provider. Receives the technical request data described above. Does not receive booking-form submissions. Their privacy practices are documented at www.cloudflare.com/privacypolicy/.

Fathom Analytics.

Our privacy-first analytics provider. Receives aggregate page-view data without identifying you as an individual. Their privacy practices are documented at usefathom.com/privacy.

Resend.

Our email infrastructure provider. When you email us or submit the booking form, the message routes through Resend for delivery. They process it for the purpose of email delivery only. Their privacy practices are documented at resend.com/legal/privacy-policy.

We do not share your data with advertising networks. We do not sell data. We do not give data to third parties for any purpose other than the operational ones named above.

How long we keep it.

Different data has different retention.

• Booking-form submissions and email correspondence: kept for up to 24 months from the date of last contact, then deleted. If you become a client, your records are retained for the duration of the engagement plus the retention period required by tax law and professional indemnity insurance, whichever is longer.
• Technical request data in server logs: retained by Cloudflare per their standard log-retention policy. We do not pull these logs into our own systems for analysis.
• Aggregate analytics data: retained by Fathom per their standard retention policy.
• Email metadata in transit: retained by Resend per their standard retention policy for delivery monitoring and abuse prevention.

If you ask us to delete your data sooner than these defaults, we will delete it (see Your rights below) unless we are required by law to keep a particular record.

Your rights, and how to use them.

Under UK GDPR you have a set of rights over your personal data. Each is named below, in plain English, with the path to exercise it.

The right to access.

Ask us what data we hold about you, and we will send you a copy.

The right to rectification.

Tell us if anything we hold is wrong, and we will correct it.

The right to erasure.

Ask us to delete your data, and we will, unless a legal obligation requires us to keep it.

The right to restrict processing.

Ask us to stop using your data while a question about it is being resolved.

The right to data portability.

Ask us to send your data to you, or to another provider, in a structured format.

The right to object.

Tell us you do not want us to process your data for a particular purpose, and we will stop unless we have a compelling lawful reason to continue.

The right to withdraw consent.

If we are processing your data on the basis of your consent, you can withdraw that consent at any time.

To exercise any of these rights, email us at the address in Contact and complaints below. We will respond within one month. Where a request is complex, we may extend by up to two further months and tell you why. There is normally no charge. We may ask you to verify your identity before we respond, to protect your data from unauthorised access.

How to reach us, and what to do if you are unhappy.

Specialist Scale is a venture brand operated by Krsna Labs Limited, the legal entity responsible for this website and the data described on it. Krsna Labs Limited is registered in England and Wales, company number 16674432, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

We are registered with the UK Information Commissioner's Office under registration number ZC045160.

For data-related questions or to exercise any of the rights above, email hello@specialistscale.com with Privacy in the subject line.

If you are unhappy with how we have handled your data and we have not been able to resolve it with you directly, you have the right to complain to the Information Commissioner's Office at ico.org.uk.

When this page changes.

We may update this privacy policy from time to time as the site, the tools we use, or the law changes. When we make a material change, we will update the date at the bottom of this page and, where the change affects existing relationships, we will notify clients directly.

Last updated: 20 May 2026. Version 1.0.