Privacy Policy

Citeup is an AI-visibility agency and operates the website citeup.tech. This notice explains how we handle personal information when you visit the website, contact us or use a feature made available through it.

Citeup is the controller for the personal information described in this notice. This means we decide why and how that information is used.

Questions about this notice or requests concerning your information can be sent to privacy@citeup.tech.

If you request an AI visibility snapshot through our form, we ask for your first and last names, email address, phone number, clinic name, clinic website and role. You may also tell us which treatments are most important to the clinic and how you heard about Citeup.

The form is intended for business enquiries. Please do not include patient information, medical records, health information, account passwords or payment-card details. We do not ask for file uploads.

When your browser connects to the website, our hosting and infrastructure providers may automatically process limited technical information. This can include your IP address, browser and device type, requested pages, date and time, referring page and security or error logs. This information is needed to deliver, maintain and protect the website.

The page address determines which language version is shown. Use the language selector to switch between the English and German home pages.

We do not currently use website analytics, advertising trackers or our own analytics or advertising cookies. Optional third-party features may use their own cookies or similar storage when they are available; the relevant sections below explain this.

• to assess and respond to an enquiry;
• to arrange a call or provide a service you request;
• to operate, troubleshoot and secure the website;
• to prevent spam, fraud and misuse;
• to administer bookings when that option is available;
• to keep appropriate business, tax and legal records; and
• to establish, exercise or defend legal claims.

Under UK data-protection law, we rely on:

• Steps at your request before a contract, and performance of a contract, where we respond to a request for services, arrange a booking or provide paid work.
• Legitimate interests, where we respond to business enquiries and operate, improve and protect the website. Our interests are running the business, communicating with prospective clients and keeping our services reliable and secure. We consider the impact on your rights before relying on this basis.
• Legal obligation, where we must retain or disclose information to comply with the law.

The website validates your submission and sends it to us by email using FormSubmit. The website does not save a separate copy in an application database. FormSubmit retains submissions for 30 days, and our business email provider holds delivered messages under our enquiry retention policy.

Fields marked as required are needed so that we can understand the enquiry and respond. If you do not provide them, the online form cannot be submitted; you can instead email us directly. Sending an enquiry does not add you to a marketing list, and we do not make solely automated decisions about you that have legal or similarly significant effects.

If you select the Book a call button, an embedded Google Calendar appointment schedule expands within the contact form. Only then does your browser connect to Google, which receives technical information such as your IP address and browser details and may use cookies or similar technologies. If you book, Google collects the appointment and contact details you enter and makes the booking details available to us.

Google handles information under its own Privacy Policy. You can use the enquiry form or email us instead if you do not want to use the calendar.

We share personal information only where needed with service providers that support this website and our business, including our hosting and infrastructure provider, FormSubmit and our business email provider. If enabled, this can also include Google for appointment booking and Cloudflare for bot protection.

We may also share information with professional advisers, insurers, courts, regulators, law-enforcement bodies or another party to a business reorganisation where there is a proper legal reason. We do not sell or rent personal information.

Some service providers operate in countries outside the UK. Where our use of a provider involves a restricted transfer of personal information, we require an approved transfer mechanism to apply. This may be UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, together with any assessment required by law. Contact us if you would like more information about the safeguard used for a particular provider.

We keep contact enquiries only for as long as needed to deal with the enquiry and any resulting work, and afterwards only where needed for legal, accounting or dispute-resolution purposes. We periodically review enquiry records and delete or anonymise information that is no longer needed.

Technical and security logs are kept only for as long as our hosting and security providers need it for security, reliability and abuse prevention. Booking and payment providers keep information under their own retention policies. We may retain transaction and contract records for longer where tax, accounting or other law requires it.

We use reasonable technical and organisational measures to protect personal information, limit access to people and providers that need it, and choose established service providers. No internet transmission or storage system is completely secure, so we cannot promise absolute security.

To report a suspected website or information-security issue, email security@citeup.tech. Privacy and data-rights requests should continue to use privacy@citeup.tech.

Depending on the circumstances, you may have the right to ask for a copy of your personal information, correct it, have it deleted, restrict how it is used, or receive and transfer certain information. You may also object to particular uses.

You have the right to object to processing based on our legitimate interests. If you object, we will stop unless we have compelling legitimate grounds to continue or need the information for legal claims.

These rights are not absolute and may not apply in every case. To exercise one, email privacy@citeup.tech. We may need to verify your identity before acting on a request.

Please contact us first so that we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office. You can find guidance and contact options on the ICO's data-protection complaints page.

This notice took effect on 12 July 2026. We may update it when our services, providers or legal obligations change. The date shown at the top of this section will always identify the latest version, and we will highlight material changes where appropriate.