Privacy Policy
Last updated: January 2025
1. Introduction
AppearanceAnxiety.com ("we", "our", or "us") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clinical assessment platform.
2. Information We Collect
2.1 Clinic Account Information
When clinics register, we collect: clinic name, email address, country, and clinic type. This information is necessary to provide our services and comply with regulatory requirements.
2.2 Patient Assessment Data
Patient data is de-identified using unique patient keys (e.g., AAQ-XXXX-XXXX-XX). We collect: age band (not date of birth), sex, country, assessment responses, and computed scores. We do not collect names, addresses, or other directly identifying information.
2.3 Technical Data
We automatically collect certain technical information including IP addresses, browser type, device information, and usage patterns to maintain security and improve our services.
3. How We Use Your Information
- To provide and maintain our assessment platform
- To calculate clinical scores and generate reports
- To communicate with clinics about their accounts
- To improve our services and develop new features
- To ensure security and prevent fraud
- To comply with legal obligations
4. Data Storage and Security
All data is stored in secure, encrypted databases hosted in GDPR-compliant data centres. We implement industry-standard security measures including:
- TLS encryption for all data in transit
- AES-256 encryption for data at rest
- Row-level security ensuring clinic data isolation
- Regular security audits and penetration testing
- Multi-factor authentication options
5. Data Sharing
We do not sell or rent your data. We may share data in the following circumstances:
- With your consent: For research purposes when explicit consent is given
- Service providers: With trusted partners who assist in operating our platform (e.g., hosting providers)
- Legal requirements: When required by law or to protect our rights
6. Research Data
Clinics may opt-in to contribute anonymised data for research purposes. Research consent is:
- Entirely voluntary and separate from service access
- Tiered (internal validation, publication, re-contact)
- Revocable at any time
- Subject to k-anonymity standards for any data export
7. Your Rights (GDPR)
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Lodge a complaint with a supervisory authority
8. Data Retention
We retain clinic account data for as long as the account is active. Assessment data is retained according to clinical record-keeping requirements (typically 7 years for adults, longer for minors). Clinics can request data deletion at any time.
9. International Data Transfers
Our servers are located in the UK/EU. If you access our services from outside these regions, your data will be transferred to and processed in these locations in accordance with applicable data protection laws.
10. Contact Us
For privacy-related enquiries or to exercise your rights, please contact:
Email: privacy@appearanceanxiety.com