Privacy notice
What we collect, why, who sees it, and how long we keep it.
Last updated 9 Nov 2026. Thera Travel Ltd (company number 15435430, 43 Upton Lane, London E7 9PA) is the controller of your personal data. Contact: saher@theratravel.co.uk.
If you send us an enquiry
| Information | Why we use it | Legal basis |
|---|---|---|
| Your first name, email and mobile number (if you give one); the treatment you're looking into, when, a rough budget, and where you live; the page or clinic page you asked from, and which advert or website brought you there | To reply to your enquiry, and to send it to relevant, pre-vetted clinics that offer your treatment, in or near the country you're considering. Because the treatment you're looking into can say something about your health, the form asks for your consent with an unticked box: “Thera can store this enquiry, contact me about it, and send my information to relevant, pre-vetted clinics.” We record the wording you saw and when. You can withdraw your consent at any time by replying to any of our emails or emailing us: we then stop sending your enquiry to clinics, and tell any clinic that has your details to delete them | Explicit consent (UK GDPR Articles 6(1)(a) and 9(2)(a)) |
| A coded version of your internet address and of your email address, which can't be turned back into either | To stop spam and to join up two enquiries you send within a day, so you aren't emailed twice | Legitimate interests |
Our enquiry service is for adults. Please don't send us an enquiry if you're under 18.
Your name, email and mobile number are encrypted before they are stored, on Cloudflare's servers in the EU. Your enquiry is also emailed to Saher.
What clinics receive
Up to 5 clinics receive a summary: the treatment, when, your budget band, where you live, and a masked version of your first name and email. Up to 3 that choose to contact you then receive your first name, email and mobile number. Each one is pre-vetted: we have checked its licence on its country's official medical register and its company, and it has signed our data-sharing agreement, which lets it use your details only to reply about this treatment and never to pass them on. Once a clinic has your details it is responsible for them under its own privacy notice. Clinics are outside the UK; most are in the European Economic Area, which the UK recognises as protecting personal data adequately.
Free guides
| Information | Why we use it | Legal basis |
|---|---|---|
| Your email, if you ask us to send you a free guide | To send it, and, if you ticked the box when it was offered, up to 4 further emails | Consent |
| How you use the website | Google Analytics, only if you accept analytics cookies; and an anonymous count of which pages are viewed and which advert or website brought you there, with no cookies and no identifier (if you accept cookies, your browser also keeps that advert's name until you close the tab) | Consent (analytics); legitimate interests (anonymous counts) |
| Which advert or website brought you, if you ask for a guide (for example “a Facebook advert”) | To know which adverts work, so we don't pay for the ones that don't | Legitimate interests |
| Whether you came from one of our Facebook or Instagram adverts, and which general part of the site you visited (for example “clinic pages”, never which clinic) | To measure our adverts with Meta, only if you accept cookies. We never send Meta a clinic, treatment, country, your email or your name | Consent |
Clinics we send enquiries to
The emails we send to clinics about enquiries (a new enquiry, a reminder and a last call) come from clinics.theratravel.co.uk. They record when each one is delivered and opened, and when a link in it is clicked, using a small image and links that pass through our email provider, Resend. We use this to check that clinics receive the enquiries we send them, and to count totals. Open counts are approximate: some mail apps load or block images automatically. Emails to patients, and sign-in emails, are not tracked.
Who we share it with
We send your enquiry to clinics only as described above, and we don't sell your information to anyone. We use these services to run Thera Travel: Cloudflare (website hosting, and storing enquiries), Resend (sending our emails), Google Workspace (email) and Google Analytics (if you accept cookies), Meta (advert measurement, only if you accept cookies). Some of them may process data outside the UK under approved safeguards.
How long we keep it
- Enquiries: your name, email and mobile number are deleted automatically 12 months after we last heard from you, or sooner if you ask. Reply to any of our emails with the word delete. The copy of your enquiry in our email inbox is deleted on the same schedule. Enquiries our checks mark as spam are deleted after 30 days. We keep the treatment, the timing and the page, which don't identify you, to count enquiries.
- Free guide email requests: until you unsubscribe, or 12 months, whichever is sooner.
Your rights
You can ask to see, correct or delete your information, withdraw consent at any time, or object to how we use it. Email us. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We set no analytics or advertising cookies unless you accept them in the banner. You can change your choice by clearing this site's data in your browser.