Last updated: 24 October 2026

Medecly Limited (“Medecly”, “we”, “our”, “us”) is a company registered in England and Wales (company number 17342870), with its registered office at Bayside Business Centre, Sovereign Business Park, Poole, BH15 3TB, United Kingdom. We are the controller of the personal data described in this Privacy Policy.

This Privacy Policy explains how we collect, use, share and protect personal data when you visit www.medecly.io (the “Website”), contact us, or do business with us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), and, where it applies, the EU General Data Protection Regulation (EU GDPR).

If you have any questions about this Privacy Policy, please contact us using the details at the end of this page.

Personal Data We Collect

“Personal data” means any information relating to an identified or identifiable living person. We collect the following types of personal data:

• Information you give us. When you submit our contact form or email us: your name, email address, company name, job title, phone number (if provided) and the content of your message. If you become a client or supplier, we also hold business contact details, contract and project correspondence, and invoicing details.

• Information collected automatically. When you visit the Website, our hosting provider Squarespace collects technical data such as your IP address, browser and device type, the pages you view and how you arrived at the Website. Analytics data is only collected if you accept analytics cookies (see Cookies & Analytics below).

• Information from other sources. Where relevant, we may use publicly available business information, for example your company website or LinkedIn profile, to prepare for a conversation you have requested.

Contact form. When you submit our contact form, the information is stored in our Squarespace account and sent to our business email, hosted by Google Workspace, so that we can respond to your enquiry.

Special category data. We do not ask for, and do not want to receive, special category data (such as health data) or patient data through the Website. Please do not include patient information, clinical data or other sensitive personal data in contact form submissions or initial emails. If a project requires us to access such data, we will agree how it is handled in a written contract before any data is shared.

How We Use Your Personal Data

We use personal data to:

• respond to your enquiries and arrange conversations you request;

• prepare proposals and enter into contracts with clients and suppliers;

• deliver our consultancy services and manage client projects;

• issue invoices, keep financial records and meet tax obligations;

• operate, secure and maintain the Website;

• understand how the Website is used and improve it (only with your consent to analytics cookies);

• send occasional business communications relevant to an existing or prospective working relationship (you can opt out at any time); and

• comply with legal obligations and establish, exercise or defend legal claims.

Legal Basis for Processing

We rely on the following legal bases:

• Legitimate interests: responding to enquiries, running and securing the Website, managing business relationships and sending relevant business communications. We only rely on this where our interests are not overridden by your rights and interests.

• Contract: taking steps at your request before entering a contract, and performing a contract with you or your organisation.

• Legal obligation: keeping financial and tax records and complying with other legal requirements.

• Consent: setting analytics cookies. You can withdraw consent at any time through the cookie settings on the Website. This does not affect processing that took place before you withdrew it.

How We Share Your Information

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract, and only as far as needed to provide their services:

• Squarespace: website hosting, contact forms and analytics (see Squarespace Platform below).

• Google Workspace: business email and document storage.

• Xero: invoicing and accounting (clients and suppliers only).

• PandaDoc: electronic signature of proposals and contracts (clients only).

• Professional advisers: such as our accountants, lawyers and insurers, where necessary.

If we start using other service providers that process personal data, we will update this list.

We may also disclose personal data where required by law, or to protect our rights, property or safety or those of others.

Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy:

• Enquiries that do not lead to an engagement: deleted within 2 years of our last contact.

• Client and supplier records, including contracts, correspondence and invoices: kept for 6 years after the end of the relevant engagement or financial year, to meet legal, tax and accounting requirements.

• Analytics data: kept in line with Squarespace’s analytics retention settings.

Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These include:

• encrypting data sent between your browser and the Website using SSL (HTTPS);

• using strong passwords and two-factor authentication on all administrative and business accounts; and

• collecting only the personal data we need for the purposes described in this policy.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.

Your Data Protection Rights

Under UK and, where applicable, EU data protection law, you have the following rights:

• Right to be informed: to receive clear information about how we use your personal data. This Privacy Policy provides that information.

• Right of access: to obtain confirmation of whether we process your personal data and to receive a copy of it, free of charge.

• Right to rectification: to have inaccurate personal data corrected and incomplete data completed.

• Right to erasure: to ask us to delete your personal data in certain circumstances, for example where it is no longer needed or you withdraw consent. We may keep data where we need it to meet a legal obligation or to establish, exercise or defend legal claims.

• Right to restriction: to ask us to limit how we use your personal data in certain circumstances, for example while you contest its accuracy.

• Right to data portability: where processing is based on consent or contract and carried out by automated means, to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller.

• Right to object: to object at any time to processing based on our legitimate interests. If you object to direct marketing, we will always stop.

• Right to withdraw consent: where processing is based on consent, to withdraw it at any time, as easily as you gave it.

• Right to complain: if you have a concern about how we handle your personal data, please contact us first and we will try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or 0303 123 1113. If you are in the EEA, you may also complain to the data protection authority in your country.

To exercise any of these rights, email us at hello@medecly.io. We will respond within one month. We may need to verify your identity before acting on your request. We do not make decisions about you based solely on automated processing.

Squarespace Platform

Our Website is hosted by Squarespace. Squarespace acts as our processor, collecting and processing personal data to provide its services to us. Squarespace may also act as an independent controller for some personal data relating to your use of its services, and is responsible for processing that data in line with applicable laws. For details, see the Squarespace Privacy Policy.

International Data Transfers

Some of our service providers, including Squarespace, Google, Xero and PandaDoc, are based in or process data in the United States or other countries outside the UK and EEA. Where personal data is transferred outside the UK or EEA, we make sure it is protected by one of the following safeguards:

• Adequacy decisions: transfers to countries that the UK Government or European Commission has confirmed provide an adequate level of data protection.

• Data Privacy Frameworks: transfers to US companies certified under the EU-US Data Privacy Framework, the UK Extension to it, or the Swiss-US Data Privacy Framework.

• Standard contractual clauses: where no adequacy decision applies, the EU Standard Contractual Clauses and, for UK transfers, the UK International Data Transfer Agreement or UK Addendum.

Children’s Privacy

Our Website and services are intended for businesses and are not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us and we will delete it.

Cookies & Analytics

This Website uses cookies and similar technologies: small files or pieces of text that are downloaded to your device when you visit a website. For details of the cookies set by our hosting provider, see The cookies Squarespace uses.

• Functional and required cookies are always used. They allow Squarespace to serve this Website to you securely.

• Analytics and performance cookies are only used if you accept them through our cookie banner. You can change your choice at any time using the cookie settings link in the Website footer.

With your consent, analytics may collect:

• information about your browser, network and device;

• the web page you visited before coming to this Website;

• your IP address; and

• details of how you use this Website, such as clicks, internal links, pages visited, scrolling, searches and timestamps.

We use this information to understand Website traffic and activity.

Fonts

This Website loads fonts from Google Fonts. To display the site correctly, Google may receive information about your browser, network or device, the page you are viewing, and your IP address.

Third-Party Links

Our Website may contain links to third-party websites, such as LinkedIn. These sites have their own privacy policies, and we are not responsible for their privacy practices. We encourage you to review their policies before giving them any personal data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational or regulatory reasons. We will post any changes on this page and update the “Last updated” date. Changes take effect when they are posted.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Medecly Limited
Bayside Business Centre, Sovereign Business Park, Poole, BH15 3TB, United Kingdom
Email: hello@medecly.io