PrivacyPolicy.

Who We Are

StapleWorks operates thestapleworks.com and is the controller of personal data collected through it. The controller is StapleWorks, a trading name of Surge ICG. Contact: hamza@thestapleworks.com.

What We Collect

If you submit the enquiry form we collect the information you type into it: your name, your practice name, email address, phone number, a monthly revenue band, and whatever you write in the free-text field. That is the only personal data this site asks you for.

Our hosting provider records standard server logs, which include IP addresses and browser user-agent strings, for security and reliability. We do not combine those logs with form submissions.

Why We Use It

To reply to your enquiry, assess whether an engagement is a fit, schedule a call, and where relevant send you a proposal. If we work together, to deliver and administer that engagement.

We do not sell personal data, we do not share it with advertisers or data brokers, and we do not add enquirers to a marketing list without asking. If we ever want to send you something you did not ask for, we will ask first.

Legal Basis

Where the UK GDPR or EU GDPR applies, we rely on your consent when you submit the form, on the necessity of taking steps at your request before entering a contract, and on our legitimate interest in running and securing this website.

Who Else Sees It

Booking a call takes you to our scheduling provider, Calendly, which collects the details you enter on their page and passes them to us. What you give them is governed by their privacy policy as well as this one. If you email us instead, the message sits with our email provider. Both process that data on our behalf, and neither is used for anything but replying to you.

Typefaces on this site are served from third-party font services. Loading a page therefore discloses your IP address to those services, as it does to any host of any asset on any website. We receive no data back from them.

Cookies And Analytics

As currently built, this website sets no cookies of its own and runs no analytics, advertising or tracking scripts. There is nothing to consent to and no banner, because there is nothing being tracked.

How Long We Keep It

Enquiries that do not become engagements are deleted within 24 months. Records relating to engagements are kept for as long as needed to deliver the work and then for the period required for tax and legal purposes, after which they are deleted.

Your Rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to our using it. Email hamza@thestapleworks.com and we will respond within 30 days. You will not be treated differently for asking.

If you are in the UK or EEA you also have the right to complain to your data protection authority. If you are a California resident, you have rights of access, deletion, correction and to know what is collected under the CCPA as amended; we do not sell or share personal information as those terms are defined, and we do not use it for cross-context behavioural advertising.

Patient Data

This website does not collect patient information and is not intended to. Do not send patient records, clinical details or identifiable patient information through the enquiry form.

Where a practice shares patient imagery or testimonials with us as part of an engagement, that material is handled as confidential under our Policies and used only for the work commissioned. We are not a covered entity or business associate under HIPAA, and if an engagement would require us to become one, that has to be agreed separately and in writing first.

Security

The site is served over HTTPS. Access to enquiry data is limited to people who need it. No system is perfectly secure, and we will not claim otherwise; if a breach affects your data we will tell you and the relevant authority as the law requires.

Children

This site is aimed at business owners and operators. It is not directed at children and we do not knowingly collect data from anyone under 18. If you believe a child has submitted information, email us and we will delete it.

Changes

If this policy changes materially we will say so on this page. Continued use of the site after a change means the updated policy applies.