Widget data and cookies statement (for clinics to use in their privacy notice)

Status: first draft, 12 October 2026. Wapadesk provides this text so that a clinic can describe the widget accurately in its own privacy notice. The clinic remains the controller and should adapt the wording to its notice.

Pre-consultation enquiries on this website. When you tap the WhatsApp button on our site, a short chat asks you a few questions so that our team can help you faster. Before anything is stored we ask for your explicit consent, including for any health information you choose to share. Your answers and any photos or documents you add are saved to our enquiry system, provided by Wapadesk (Ege Digital Ltd, UK), which stores them in the United Kingdom and acts as our processor under a data processing agreement. The same answers are placed in a WhatsApp message that opens on your phone; you decide whether to send it, and the conversation then continues in WhatsApp, which is run by WhatsApp LLC under its own privacy policy. We use your enquiry to reply to you and arrange a consultation. We keep enquiries for [24] months, or [6] months if you did not finish, and you can ask us to delete yours at any time. If you tick the optional box, we may also send you updates and offers; you can withdraw that consent at any time.

Cookies and storage. The chat sets no cookies. It keeps a short-lived identifier in your browser's session storage so that the questions you answered are not lost if you close and reopen the window, and so that we can see which pages of our site are visited around an enquiry; that identifier is deleted when you close the browser tab, is never shared with other websites and is not used to identify you. These statistics are used only to improve our website, in line with the statistical-purposes exception in the Privacy and Electronic Communications Regulations as amended by the Data (Use and Access) Act 2025. [If the clinic has set "journey before consent" to off: the identifier is only created after you give consent.]

Notes for the clinic

• Replace the bracketed retention periods with the ones set under Email and reminders → Retention in the dashboard.
• If you enable GA4, Google Ads or Meta Pixel events in Widget → Marketing tags, those events fire on your website under your own cookie consent tool and must be covered by your cookie notice; Wapadesk only triggers them after your consent tool allows them.
• Keep the marketing checkbox optional and separate; the dashboard records which boxes each person ticked, with the wording version, time and language.