01
Privacy policy
How The PER Method collects, uses, shares and protects your personal information, including health information.
Who we are
The PER Method is a branded, practitioner-led health programme delivered and managed by The Ozone Clinic Ltd (company number 13843920). Its registered office is Towngate House, 2–8 Parkstone Road, Poole, Dorset, BH15 2PW. The PER service is delivered from The Ozone Clinic, The White House, Main Road, Littleton, Winchester, Hampshire, SO22 6QS.
The Ozone Clinic Ltd is the legal provider and is registered with the Care Quality Commission (CQC), provider ID 1-21254957195. Its registered location ID is 1-23023381064. The Ozone Clinic Ltd is normally the data controller for PER membership, consultation, testing and website information. Approved blood-collection and laboratory partners may also act as separate controllers for the services they provide and will supply their own privacy information where required.
Information we collect
Depending on how you interact with us, we may collect:
- identity and contact details;
- account, membership, appointment and payment information;
- health information, symptoms, goals, lifestyle information, medical history, medications and supplements;
- blood-test orders, sample information, laboratory results and practitioner notes;
- messages, feedback, complaints and consent records;
- website and device information, including cookie choices and security logs;
- marketing preferences.
Please give us accurate information and tell us if it changes.
Website analytics
We count visits to this website with our own analytics tool, which we run ourselves, so we can see which pages help people and improve the rest. It records the pages viewed, how far down a page people scroll, which buttons and links are used (for example the button that starts the free assessment), the words typed into the FAQ search box, the website, search or campaign that sent the visit, the type of device and browser, the approximate town and country worked out from the internet address, and how fast pages load.
Without your consent it sets no cookies and stores nothing on your device. It does read a few things from your browser: your cookie choice and any opt-out saved in local storage, the screen size, the language, whether the screen is a touch screen, whether the browser is being run by software, and any Global Privacy Control or Do Not Track signal. To tell visits apart within one day it uses a one-way code made from your internet address and browser together with a secret value that changes every night, so the same person cannot be recognised on another day. Your internet address itself is never stored.
If you accept analytics cookies, it also keeps a random identifier in your browser’s local storage, so we can see whether you have visited before. Rejecting cookies, now or later through Cookie settings, deletes it. If your browser sends a Global Privacy Control or Do Not Track signal, the visit is still counted anonymously but no identifier is ever kept, even if you accept cookies.
We rely on our legitimate interests in running and improving the website. UK law (the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025) allows a website to read and store this information without consent when the sole purpose is statistics about how the website is used, to improve it, and you can object at any time; you can, as described below. Each visit record is deleted 25 months after the visit, and the identifier kept after you accept cookies 25 months after your last visit. We do not use them to identify you or for advertising, and we do not combine them with membership or health records. To stop even the anonymous count on a device, open thepermethod.com/?analytics=off once (use ?analytics=on to undo it); content blockers also stop it.
Contact form
When you send an enquiry through the form on our contact page, we receive your name, email address, any telephone number you give, the subject you choose and your message, and whether you asked for occasional news. We use this to reply to you and to keep a record of enquiries. If you ticked the news box, we may also send you occasional news about The PER Method; you can unsubscribe at any time. Please do not include detailed medical information in the form.
The form is stored by our website host, Netlify, which acts on our instructions as a processor and may hold it in the United States under the safeguards described in International transfers. Netlify also records the internet address and browser used to send the form, to filter out spam, and emails each enquiry to our clinic inbox. Enquiries that do not become memberships are kept as described in Retention and security.
How and why we use it
| Purpose | Usual lawful basis |
|---|---|
| Set up and administer your membership, appointments, tests and support | Contract; steps at your request before a contract |
| Review your assessment and provide personalised education, nutrition and lifestyle support | Contract and legitimate interests; explicit consent for special-category health data unless another documented condition applies |
| Process payments and keep financial records | Contract and legal obligation |
| Keep services secure, improve quality and handle complaints | Legitimate interests and legal obligation |
| Send optional marketing | Consent, or legitimate interests where the law permits; you can opt out at any time |
| Respond to safeguarding, legal or regulatory requirements | Legal obligation, vital interests or substantial public interest where applicable |
We do not use health information for advertising. Where we rely on consent, you may withdraw it, but this will not make earlier processing unlawful.
Health information and testing
Health and genetic information are special-category data and receive additional protection. We only collect information relevant to the service you request. Test requests and the information needed to identify and process your sample may be shared with the selected CQC-registered blood-testing or collection provider and approved laboratory. Results are returned through secure systems or other agreed channels and are reviewed in context.
The Ozone Clinic Ltd remains responsible for the parts of the service it directly carries on. A partner may be separately responsible for collection, analysis or other services it provides. Withdrawal of consent may prevent us from continuing a health-related service. Once a sample has been processed or results generated, we may need to retain the resulting record.
Who receives information
We may use carefully selected providers for membership and health portals, appointments and communications, secure hosting, email, payments, laboratories, sample collection, professional advice and IT security. They receive only what they need. We may also disclose information where required by law, to protect vital interests or in connection with a business reorganisation subject to appropriate safeguards.
We do not sell personal information.
International transfers
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires it, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another approved safeguard, together with appropriate security checks.
Retention and security
We keep information only as long as needed for the purposes described, including legal, tax, professional, insurance and complaints requirements. Membership, contract and payment records are normally retained for up to six years after the relationship ends. Enquiries that do not become memberships are normally retained for up to two years. Health records and laboratory information follow the applicable record-retention schedule and the requirements of the provider responsible for that record. Marketing information is kept until you opt out or it is no longer useful.
We use role-based access, secure systems, confidentiality obligations and supplier checks. No internet service is completely risk-free; please protect your login details and contact us promptly if you suspect unauthorised access.
Your rights
You may have rights to access, correct, erase or restrict your information; object to certain uses; receive portable data; and withdraw consent. You also have rights relating to solely automated decisions. The PER assessment may help organise information, but we do not intend to make decisions with legal or similarly significant effects solely by automation.
To exercise a right, email info@theozoneclinic.co.uk. We may need to verify your identity. You may also complain to the Information Commissioner’s Office.
Children and changes
PER memberships are intended for adults aged 18 or over unless we expressly agree otherwise and appropriate parental or guardian arrangements are in place. We do not knowingly collect children’s information through the general website.
We may update this notice when our services, suppliers or legal obligations change. Material changes will be highlighted where appropriate.