Privacy policy

Last updated: 14 November 2026

Who is responsible for your data

Mahir El-Shetob, trading as Shetob, is the controller of the personal information described here. You can contact me at enquiries@shetob.co.uk.

What I collect

When you use the free health check form or the contact form, I collect only what you type into it:

• your name and email address;
• your website address and, for the health check, your business name;
• any message you choose to write.

If you book a 15-minute call, Cal.com collects your name, email address and phone number, plus anything you add to the booking, and passes the booking to me. I need your phone number because I ring you at the time you booked.

Please do not include sensitive personal information, such as health details, in your message. I do not need it.

Why I use it, and my lawful basis

I use your details to reply to your enquiry and, if you ask for it, to carry out your free health check. If you book a call, I use your phone number only to call you at the booked time. My lawful basis is legitimate interests (responding to people who contact me) and, where you ask me to take steps towards a care plan, taking steps at your request before entering a contract.

I do not use your details for marketing, and I do not sell or share them for advertising.

Who else handles your data

• Web3Forms receives form submissions and forwards them to me by email. It keeps a copy for up to 3 months and then deletes it automatically. It uses spam-filtering services (CleanTalk and Akismet), which receive the sender’s IP address and email address. See the Web3Forms privacy policy.
• Cloudflare hosts this website, so it handles visitors’ IP addresses to serve the site and protect it. It also provides privacy-friendly analytics. Cloudflare Web Analytics does not use cookies and does not track individual visitors across sites.
• Cal.com handles call bookings on my behalf if you choose to book a call. It receives the name, email address, phone number and any notes you give when booking.
• iCloud Mail, provided by Apple, stores the messages I receive.

Some of these providers are based in, or process data in, countries outside the UK, including the United States and India. Here is what each says it relies on to protect UK data:

• Cloudflare and Cal.com are certified under the UK Extension to the EU–US Data Privacy Framework, and also provide standard contractual clauses with the UK Addendum.
• Web3Forms uses standard contractual clauses with the UK Addendum.
• Apple says transfers from the UK are governed by standard contractual clauses.

Cookies

This website does not set cookies of its own, so there is no cookie banner.

How long I keep it

I keep enquiries and health-check requests for 6 months after we were last in touch, then delete them.

If you become a client, I keep your records for as long as your care plan runs and for 6 years after it ends, because I may need them for tax purposes or if there is a dispute about the contract.

Login and access details for your website are deleted within 45 days of your plan ending, or as soon as you ask me to delete them.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal information I hold about you;
• ask me to correct it, or to delete it;
• ask me to restrict how I use it, or object to my using it;
• ask for it in a portable format.

To use any of these rights, email enquiries@shetob.co.uk. If you are unhappy with how I handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.