Who we are
Seventy3 Group Ltd is a company registered in England and Wales, company number 16392260, with its registered office at Suite 21, Call House, Enfield Street, Leeds, England, LS7 1RF. We run the Seventy3 clinics in Manchester, Glasgow and Newcastle, and this website.
For the information described in this notice, Seventy3 Group Ltd is the data controller. That means we decide what is collected and why, and we are the ones answerable for it. We are registered with the Information Commissioner's Office under registration number ICO:00014031429.
One thing worth knowing
We also build the software our clinics run on, which is called Seventy3 OS. So when you are treated by us, your clinician and the company that makes their record system are the same company. There is nothing unusual about a clinic running its own software, but you should know it rather than have to work it out. Seventy3 OS has its own separate privacy policy covering its use by other clinics, and it does not apply to you as our patient.
What we collect
When you book
Bookings are taken through Acuity Scheduling. We collect your name, email address, telephone number, which clinic and time you chose, and anything you write in the booking form.
When you pay
A £50 deposit is taken online through Stripe. Your card details go straight to Stripe and never reach us: what we see is that the payment succeeded, the amount, and the last four digits. The remaining balance is paid at the clinic, where the card terminal provider handles the card in the same way.
When you are treated
This is the part that matters most, and it is health information. It includes what you tell us about your symptoms, your history, any medication or diagnoses, your occupation and what you do physically. It includes what we find when we assess you, what we did in the session, and the plan we gave you afterwards. Together that is your clinical record.
Photographs
We sometimes take before and after photographs of the area being treated, because a picture records a change that a sentence cannot. We ask you at the time, every time, and you can say no. Saying no changes nothing about your treatment.
Photographs are held in a private, access-controlled store that is not reachable from the internet: they can only be opened through a single-use link generated for a clinician at the moment they need it. They form part of your clinical record and are kept for the same period as the rest of it.
If you enquire about training
The enquiry form on the training page collects your name, email address, where you work, which cohort you are asking about, and whatever you write. It is sent to us as an email and nothing from it is stored in a database.
If you leave us a review
Reviews on Google are posted by you, to Google, under whatever name you choose to use. We can read and reply to them like anyone else, but we did not collect them and we cannot remove them. That is between you and Google.
This website
seventy3.co sets no cookies. It runs no analytics, no advertising pixels, no session recording, and stores nothing in your browser. We do not know who you are when you read a page here, and we are not building a profile of you.
Two ordinary technical things do happen. Our hosting provider keeps short-lived server logs, which include IP addresses, because a website that cannot see its own traffic cannot be kept secure. And links to book an appointment or to our Instagram take you to other companies' websites, which have their own privacy policies and are not covered by this one.
Recording and AI-assisted notes
We may record the audio of your appointment. This section explains it properly because it is the least obvious thing we do.
Why
So that the clinician can pay attention to you instead of writing while you talk, and so that the note afterwards is accurate rather than reconstructed from memory.
What happens to the recording
The audio is sent to a specialist transcription service, which turns it into text and works out which parts were said by you and which by the clinician. That transcript is then organised into a structured clinical note by Anthropic's Claude. A clinician reads and approves every note before it becomes part of your record. Nothing is filed without a person having checked it.
Those services are named in full in section 6, and they are bound by contract to use your information only to do that job. They are not permitted to use it to train their own systems.
We do not keep the audio ourselves. What is filed in your record is the written note. The recording is held only by the transcription provider, under their own retention terms, and it is not part of your clinical record.
You can say no
We ask for your consent to recording separately from anything else, and you can refuse, or change your mind later, without giving a reason. If you do, the notes are written by hand instead. It makes no difference to your treatment, and we will not ask you twice.
If you have already been treated by us and want to know whether a recording of your appointment exists, ask and we will tell you.
Why we are allowed to hold it
UK GDPR requires a lawful basis for every use of personal information, and a second, stricter one for health information. Ours are set out below.
| What for | Lawful basis |
|---|---|
| Booking your appointment and taking payment | Article 6(1)(b) — performing a contract with you |
| Keeping a clinical record of your treatment | Article 6(1)(f) — our legitimate interest in providing safe care, and Article 9(2)(h) — health care provided by a professional under a duty of confidentiality |
| Recording an appointment and using AI assistance to write up the note | Article 6(1)(a) and Article 9(2)(a) — your explicit consent, asked for separately and refusable |
| Taking before and after photographs | Article 6(1)(a) and Article 9(2)(a) — your explicit consent, asked for at the time and refusable |
| Sending you appointment reminders | Article 6(1)(b) — performing a contract with you |
| Answering a training enquiry | Article 6(1)(b) — taking steps at your request before entering into a contract |
| Keeping financial records | Article 6(1)(c) — a legal obligation we are subject to |
| Keeping this website and our systems secure | Article 6(1)(f) — our legitimate interest in preventing misuse |
Who else sees it
We use a small number of companies to run the clinic. They act on our instructions and may only use your information to do the job we have given them.
| Who | What they do | Where |
|---|---|---|
| Acuity Scheduling (Squarespace Ireland Ltd) | Taking bookings, holding your appointment details, sending appointment reminders | Ireland, with processing in the United States |
| Stripe Payments UK Ltd | Taking the £50 deposit. Stripe receives your card details directly; we never hold them | United Kingdom |
| Supabase | The database your clinical record is stored in, configured to a UK/EU region | US company, data hosted in the UK/EU |
| Vercel | Hosting this website and the software behind it | United States |
| AssemblyAI | Transcribing the audio of a recorded appointment and separating who is speaking | United States |
| Deepgram | Transcribing and speaker-separating the audio of a recorded appointment | United States |
| OpenAI | Transcribing a recorded appointment where the provider above is unavailable | United States |
| Anthropic Ireland Limited | Turning the transcript of a recorded appointment into a structured clinical note (section 4) | Ireland |
| Resend | Sending transactional email, including anything you send through the training enquiry form | United States |
| Twilio Ireland Limited | Sending SMS appointment reminders, where reminders are sent by text | Ireland |
Where any of these involve your information leaving the UK, that transfer is covered by the UK International Data Transfer Agreement or by Standard Contractual Clauses with the UK Addendum, which are the safeguards the law provides for it.
Nobody else sees your record. We do not sell information, we do not share it for anyone else's marketing, and we do not pass it to other clinicians without asking you first. The only exceptions are where the law requires us to disclose something, or where there is a serious risk to someone's safety and we have a professional duty to act.
How long we keep it
| What | How long |
|---|---|
| Your clinical record, including any photographs | Eight years from your last appointment. If you were under 18 when we treated you, until your 25th birthday. |
| Audio recordings of appointments | We keep no copy of our own. The audio goes to the transcription provider named in section 6 and what comes back is the text. Their own retention terms govern how long they hold it, and what is filed in your record is the written note. |
| Booking and payment records | Six years plus the current financial year, which is what HMRC requires. |
| Training enquiries | Two years from your last contact with us, unless it turns into a booking. |
| Server logs | Short-lived and held by our hosting provider for security and diagnostics. |
Clinical records are kept for eight years because that is the standard retention period for adult health records and because our professional and insurance obligations require us to be able to account for treatment we have given. It is not a period we chose for our own convenience.
Your rights
You have all of the following, free of charge, and we will respond within one month.
| Right | What it means |
|---|---|
| Access | Ask for a copy of what we hold about you. |
| Rectification | Ask us to correct anything that is wrong. |
| Erasure | Ask us to delete what we hold. See the note below, because this one is genuinely limited for clinical records. |
| Restriction | Ask us to stop using it while something is being sorted out. |
| Portability | Ask for what you gave us in a form you can take elsewhere. |
| Objection | Object to us using it where we rely on legitimate interests. |
| Withdrawing consent | Where you consented to something, take that back at any time. It does not undo what was done before you withdrew. |
Being straight with you about erasure. You can ask us to delete your clinical record, but we will not always be able to. Health records are kept under a legal and professional obligation, and that obligation overrides a deletion request for as long as it lasts. What we can do is tell you exactly what we hold, correct anything wrong in it, stop contacting you, and delete everything that is not part of the clinical record itself. Any notice that promises unconditional erasure of a health record is promising something it cannot deliver.
To exercise any of these, email hamayoon@seventy3.co. We may ask you to confirm who you are first, which is there to stop somebody else asking for your records.
If you are unhappy
Tell us first, at hamayoon@seventy3.co. Most things are a misunderstanding and are quicker to fix directly.
If that does not resolve it, you have the right to complain to the Information Commissioner's Office, which is the UK's data protection regulator. They are at ico.org.uk or on 0303 123 1113. You do not need our permission and you do not have to come to us first, though we would rather you did.
Contact
Seventy3 Group Ltd
Suite 21, Call House, Enfield Street, Leeds, England, LS7 1RF
hamayoon@seventy3.co
Company number 16392260. ICO registration ICO:00014031429.
If we change this notice we will change the date at the top of it. Where a change materially affects how we handle your information, we will tell you rather than rely on you noticing.