Tide HearingA New Wave of Independent Hearing Care

Legal

Privacy Policy

Last updated: March 2026

Tide Hearing ("we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions, please contact us.

Tide Hearing Ltd · Company No. 16359355 · Incorporated 2 April 2025
36 Stevenson Road, Wroxham, Norwich, England, NR12 8FE

1. What Data We Collect

We may collect and process the following categories of personal data about you:

  • Identity and contact data — name, email address, phone number, and postal address.
  • Health data — information about your hearing and medical history that you share with us for the purposes of receiving hearing care. This is special category data under UK GDPR.
  • Technical data — IP address, browser type, operating system, and pages viewed, collected automatically when you visit our website.
  • Cookie data — see Section 6 below for full details.

2. How We Use Your Data

We use your personal data for the following purposes and rely on the legal bases stated:

  • To respond to enquiries and arrange appointments — Legitimate interests / Contract
  • To deliver hearing assessments and aftercare services — Contract / Vital interests (health data)
  • To send appointment reminders or follow-up communications — Legitimate interests
  • To improve our website and understand how visitors use it — Legitimate interests
  • To comply with legal and regulatory obligations — Legal obligation

We will not use your data for automated decision-making or profiling, and we will never sell your personal data to third parties.

3. Sharing Your Data

We only share your personal data where necessary:

  • With hearing aid manufacturers or suppliers where required to process an order or warranty claim on your behalf.
  • With IT service providers (such as email and website hosting providers) who process data on our behalf under data processing agreements.
  • With regulatory or legal authorities where we are required to do so by law.

4. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected. Clinical and health records are retained for a minimum of eight years in accordance with NHS and healthcare professional guidance. Contact and enquiry data is retained for up to two years unless you ask us to delete it sooner.

5. International Transfers

We do not routinely transfer your personal data outside the United Kingdom. Where any third-party service provider transfers data internationally, we ensure appropriate safeguards are in place in line with UK GDPR requirements.

6. Cookies

Our website uses cookies to improve your browsing experience and help us understand how visitors use our site. A cookie is a small text file stored on your device.

Strictly necessary cookies

These are essential for the website to function correctly. They cannot be disabled and do not require your consent.

Cookie namePurposeDuration
tide_cookie_consentRecords your cookie preferences1 year

Analytics cookies (optional)

With your consent, we use analytics cookies to understand how visitors interact with our website. This data is used in aggregate and does not identify you personally. You may withdraw consent at any time by clearing your browser cookies.

Cookie namePurposeDuration
_gaGoogle Analytics — distinguishes users2 years
_ga_*Google Analytics — session state2 years

You can manage or disable cookies through your browser settings. For more information, visit aboutcookies.org.

7. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your personal data (the "right to be forgotten"), subject to legal retention obligations.
  • Restrict or object to certain types of processing.
  • Data portability — receive your data in a structured, machine-readable format.
  • Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us. We will respond within one calendar month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include secure encrypted connections (HTTPS), restricted access to personal data, and regular review of our data handling practices.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent revision. Continued use of our website following any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or requests relating to this Privacy Policy or our data handling practices, please reach out via our Contact page.