Website and trial privacy
What we collect before your clinic begins using Rytura.
This notice covers the public website, trial launch-list emails, optional walkthrough enquiries and the self-service free-trial account journey. A clinic's later use of client information is governed separately through the applicable service and data-processing arrangements.
Notice version
website-privacy-2026-08-15-v2
Effective 15 August 2026
The protected free-trial handoff continues to record privacy-2026-08-13-v2.
Who is responsible
ClinicKind Ltd, trading as Rytura, is the controller of the personal information described in this notice. ClinicKind Ltd is registered in England and Wales under company number 17396304. Its registered office is Flat 102, 3, Lofting House Garden Boulevard, Maidenhead, United Kingdom, SL6 1FB. Contact the controller at hello@rytura.com.
Information used for a free-trial account
When self-service signup is live, Rytura asks for the clinic name, owner name and business email needed to prepare the secure account handoff. It also records the accepted privacy-notice and trial-terms versions, acceptance time and privacy-minimised evidence needed to prevent duplicate or abusive signup attempts.
Technical and security information may include IP address, browser and request details, timestamps, a Turnstile challenge result, delivery status, rate-limit evidence and account-security events. Network and identity rate-limit scopes are designed to be stored as protected derived values rather than reusable raw identifiers.
An opaque trial reference may be displayed in the authenticated workspace and associated with the clinic account in protected records. It helps Rytura investigate account sharing, systematic extraction or misuse without placing the owner's name or email in the visible watermark.
Do not enter client, patient, health, treatment or clinical information into the free-trial signup. The signup is for the clinic owner's business identity and security setup only.
Why it is used
Clinic and owner details are used to take the requested steps towards providing the free trial, create the secure handoff and establish the protected owner account. The lawful basis is taking steps at your request before entering a contract and, after you accept the trial terms, performance of those terms.
Security, delivery and anti-abuse information is used to protect Rytura, its clinics and other users, restrict duplicate trials, investigate failures and keep proportionate evidence of account actions. The lawful basis is legitimate interests in operating and securing the service and preventing misuse. Legal-obligation processing may apply where a record must be kept or disclosed by law.
When the 30-day trial begins
Submitting clinic details does not itself create the clinic. The trial begins when the same owner opens the secure email link, creates a password and authenticator checks and successfully claims the protected clinic workspace. Signup requires no payment card and does not create an automatic paid subscription.
Website, trial launch-list and walkthrough information
Routine technical request data is used to deliver, secure and troubleshoot the public website. If you choose to email Rytura for the trial launch list or a walkthrough, Rytura receives the information you decide to send and uses it to respond and keep a reasonable business record. A launch-list email is expected to contain your name, clinic name, role and business email. Please do not send client or patient information through either route.
Trial launch-list information is used to record your request and send essential updates about trial availability or access. It is not used for unrelated marketing unless you separately request or agree to that. The lawful basis is taking steps at your request before entering a contract and Rytura's legitimate interests in answering the requested business enquiry.
Optional cookies and website analytics
Google Analytics is not loaded on the public marketing website unless it has been configured and you choose Allow analytics cookies. Before that choice, analytics storage and all advertising-related consent signals are set to denied. Choosing necessary cookies only means the Google Analytics script is not loaded.
If you consent, Rytura sends only an approved public marketing-page path with URL query strings removed, broad device and engagement information, an approximate country or region derived by the provider, and pre-approved names for actions such as selecting a pricing or product-tour button. Rytura does not send text entered into forms, names, email addresses, client or patient information, clinical information, search parameters, or activity from protected Rytura workspaces, staff areas, booking systems, client portals or payment systems.
The lawful basis for this optional measurement is consent. You can allow, refuse or later change the choice using the Cookie preferences control. Withdrawing consent removes accessible Google Analytics cookies and reloads the page without the analytics script. Refusing analytics does not affect access to the public website.
| Consent choice | clinickind.analytics.consent.v1 in local browser storage (retained so an existing choice is not lost during the trading-name change) | Necessary to remember the choice | Until you change the choice or clear browser storage |
|---|---|---|---|
| Cloudflare security | __cf_bm, when issued by Cloudflare | Necessary bot-management and site-security cookie | 30 minutes after continuous inactivity |
| Google Analytics | _ga and _ga_* | Optional public-site analytics, only after permission | Up to 2 years by default; browsers may shorten this |
The cookie durations above follow the published defaults from Cloudflare and Google Analytics.
Google processes the consented measurement information as Rytura's analytics provider. The live Google Analytics property must use a two-month event-data retention setting before activation. Rytura may keep privacy-minimised, aggregated trend reports for up to 24 months to understand website performance; those reports do not contain form entries, client records or individual Rytura account activity.
Who receives information
Website hosting, security, authentication, challenge-verification and email-delivery providers process the information needed to perform their services. Google receives optional public-website measurement only after the analytics choice described above. Information may also be disclosed to professional advisers or a public authority where reasonably necessary for legal claims or a legal obligation. Personal information is not sold.
International transfers
Some hosting, security, authentication, analytics or email suppliers may process information outside the UK. Where UK adequacy regulations do not cover the destination, Rytura requires an appropriate UK transfer safeguard, such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses. You can ask for information about the safeguard relevant to your data by email.
How long it is kept
An unclaimed signup handoff expires after 24 hours. Its email is then redacted, as it is after a successful workspace claim. Rate-limit records are pruned after their security window. Security and audit evidence may be retained for longer where needed to protect accounts, demonstrate actions or meet legal requirements.
When a trial ends, access is suspended and there is no automatic charge. Trial-workspace information is retained pending the documented retention or deletion decision that applies to the service; it is not silently deleted or converted into a subscription. Walkthrough correspondence is normally reviewed after 24 months of inactivity and deleted unless an active relationship, legal obligation or dispute requires it for longer.
Trial launch-list entries are reviewed within three months after the public trial opens and deleted unless you have begun an active trial or enquiry, asked to keep receiving relevant updates, or a legal obligation or dispute requires a longer record. You can leave the list at any time by emailing Rytura.
Your rights
Depending on the circumstances, you can ask for access, correction, deletion or restricted use. You may also have rights to object and to data portability. Rights are not absolute, and any lawful exception will be explained. Send a request to hello@rytura.com.
Your right to object: you may object to processing based on legitimate interests. Rytura will stop unless there are compelling legitimate grounds to continue or the information is needed for legal claims.
Your choices and automated decision-making
Clinic, owner and business-email details are needed to create a secure trial handoff; without them the account journey cannot continue. Turnstile and rate limits can reject or delay a suspicious attempt for security reasons, but Rytura does not use the signup information for advertising profiling or solely automated decisions with legal or similarly significant effects.
Complaints
Please contact Rytura first so the concern can be investigated. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, by telephone on 0303 123 1113, or by post at Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Your clinic and the Rytura platform
A clinic using Rytura is responsible for explaining how it uses client information and for providing the privacy information that applies to its services. Platform data roles, instructions, retention and rights handling are addressed in the clinic's separate agreements and notices.
Changes
Rytura records the notice version accepted during signup. This notice will be updated when the information collected, purposes, suppliers, retention approach or legal and operational details change.