Privacy notice

IronUp Ltd is the data controller, which means we decide how your details are used and are responsible for them. We’re registered in England and Wales.

To ask about your data, write to hello@ironupclinic.co.uk.

When you join the waiting list, we store:

• your name, email address and postcode
• your answers to three questions: whether you’ve been told you’re iron deficient, whether you’ve tried iron tablets, and whether you’d consider paying £375 for an infusion
• how you heard about us, if you tell us
• the date and time you signed up, and the exact consent wording you agreed to
• a scrambled, one-way version of your IP address. We can’t turn it back into your IP address.

Two of those answers are about your health. Data about health gets extra protection under UK law, and we only hold it because you’ve explicitly agreed.

• To email you when we open, and to send progress updates roughly once a month until then.
• To understand, in total, who is interested and where they are, so we can plan the clinic.
• To stop spam and repeated automated sign-ups. This is the only thing the scrambled IP address is used for.

We don’t sell your details or use them for advertising.

Consent. You tick a box to agree before you join (UK GDPR Article 6(1)(a), and Article 9(2)(a) for the health-related answers). You can withdraw consent at any time, and it’s as easy as giving it: reply to any of our emails, or write to hello@ironupclinic.co.uk. We’ll then delete your details.

For the scrambled IP address, our basis is legitimate interests: keeping the form free from abuse (Article 6(1)(f)).

For 12 months from the day you sign up, or until you withdraw your consent, whichever comes first. After that we delete it. If we’d like to stay in touch for longer, we’ll ask you first.

We don’t share your details with anyone for their own use. A small number of companies process data on our behalf, under contract:

• Supabase stores the waiting list in a database hosted in London.
• Resend sends our emails.
• Vercel hosts this website.

Resend and Vercel are based in the United States, so some data may be processed outside the UK. Where that happens, it’s protected by safeguards recognised under UK data protection law, such as the UK–US data bridge or standard contractual clauses.

This site sets no cookies and has no advertising trackers. We use Plausible Analytics to count visits. It doesn’t use cookies, doesn’t collect personal data and doesn’t follow you across other websites. That’s why there’s no cookie banner.

You can ask us to:

• give you a copy of the details we hold about you
• correct anything that’s wrong
• delete your details
• restrict how we use them, or object to it
• send your details to you or someone else in a portable format

You can also withdraw your consent at any time. Write to hello@ironupclinic.co.uk. It’s free, and we’ll reply within one month.

Please tell us first, so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator:

• ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113

If we change how we use your details, we’ll update this page and, if the change is significant, email everyone on the waiting list.