Legal
Privacy policy
Last updated: 18 October 2026
This policy explains, in plain English, what personal data Cortex Med Consulting collects through this website and in our work, why we collect it, who we share it with and the choices you have.
1. Who we are
Cortex Med Consulting is an independent consulting company based in Dubai, working with physiotherapy, chiropractic, osteopathy, orthopaedic and rehabilitation clinics, departments and practitioners worldwide. We are responsible for the personal data described in this policy.
[Placeholder: registered company name, licence number and registered address]
2. Data we collect
When you use our contact form
We collect what you enter: your name, email address, organisation, discipline, stage of your practice or project, area of interest and your message.
The Clinic Health Check
The self-check runs entirely in your browser. Your ticks and scores are not sent to us, not saved and not stored in cookies; they disappear when you leave or reload the page. If you choose to share your results with us, for example in a message or on a call, we treat them like any other information you send us.
When you book a call
If you book a discovery call or mentoring session, we collect the details needed to arrange it, such as your name, email address, phone or WhatsApp number, preferred date, time and time zone, and any notes you add. [Placeholder: name of booking tool, if one is used]
When we work together
During an engagement we may receive information about you and your team, such as CVs, interview notes, training records and feedback, to deliver the service you asked for.
3. Analytics and cookies
We use Google Analytics to understand how many people visit the site and which pages are useful. Google Analytics uses cookies and similar technology to collect information such as pages viewed, time on site, device and browser type, how you reached us, and an approximate location (country or city) derived from your IP address. We use this information in aggregate and do not use it to identify you personally.
You can block or delete cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Where the law requires it, we will ask for your consent before analytics cookies are set.
4. How we use your data
- To reply to your enquiry and arrange calls or sessions.
- To prepare proposals and deliver consulting, training, mentoring and recruitment services.
- To manage our client relationship, including invoicing and record keeping.
- To improve this website and our services.
- To meet legal and regulatory obligations.
We do not sell your personal data, and we do not send marketing emails unless you have asked to receive them.
5. Who we share it with
- Formspree, the service that delivers contact form messages to our inbox.
- Google, which provides Google Analytics.
- Our booking tool provider, if you book a call online. [Placeholder: provider name]
- Specialists we bring in per project, only where needed for your engagement and under confidentiality obligations.
- Vetted local partners, such as licensing companies, only when you engage us for a service that needs them and only with the information they require.
- Authorities or advisers, where the law requires it or to protect our legal rights.
6. International transfers
Because we work with clients worldwide and use service providers based in other countries, your data may be processed outside the country where you live, including in the United States. When we transfer data, we take reasonable steps to make sure it stays protected, for example by using providers that offer recognised safeguards such as standard contractual clauses.
7. How long we keep it
We keep enquiries that don't lead to an engagement for up to [Placeholder: 24 months]. Client and project records are kept for as long as the engagement lasts and afterwards for as long as needed for legal, tax and accounting purposes. Recruitment data (CVs and interview notes) is kept only for as long as needed for the hiring process and any replacement period, unless the candidate agrees to us keeping it longer. Analytics data is kept according to our Google Analytics retention settings.
8. Your rights
Depending on where you live, you may have the right to:
- ask for a copy of the personal data we hold about you;
- ask us to correct data that is wrong or incomplete;
- ask us to delete your data;
- object to or ask us to limit certain uses, and withdraw consent you have given.
We aim to handle personal data in line with the UAE Personal Data Protection Law (PDPL) and, for visitors in the European Union, the principles of the EU General Data Protection Regulation (GDPR). If you are in the EU, you also have the right to complain to your local data protection authority. To make a request, contact us using the details below; we may need to confirm your identity first.
9. Security
We use reasonable technical and organisational measures to protect your data, such as secure connections, access limited to people who need it, and confidentiality commitments from the specialists and partners we work with. No method of sending or storing data online is completely secure, so we cannot guarantee absolute security.
10. Children
This website and our services are intended for adults and professionals. We do not knowingly collect personal data from children under 18. If you believe a child has sent us their data, please contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated at the top.
12. Contact us
For any question or request about your personal data, email hello@CortexMedConsulting.com.