Privacy Notice
This notice covers cilio.co.uk and any demo site we share with you (such as our Elm Row example) — how Cilio handles data about visitors and anyone who uses a demo chat or contacts us. It does not cover how a dental practice's own patients are handled through the Cilio Service on a real practice's own website — that is the practice's responsibility under their own privacy notice, as set out in our Terms and Conditions.
Who we are
"Cilio" is the trading name of Ethan Francis and Shaurya Tomar, trading in partnership. We are the controller of the personal data described in this notice. Contact us at admin@cilio.co.uk.
What we collect, and why
If you browse the site. Standard hosting logs (IP address, browser type, pages visited, referring site) via Netlify, our hosting provider. Used to operate and secure the site. Legal basis: legitimate interests.
If you use a demo chat we've shared with you (including on a demo practice site such as our Elm Row example). Your messages, and any name, phone number, or other details you volunteer in the conversation, are sent to Anthropic's Claude API to generate a response, and are saved to our database. Do not enter real personal, medical, or urgent information into any demo chat — it is for demonstration only and is not a substitute for contacting a real dental practice. Legal basis: legitimate interests (demonstrating the product) and, where you volunteer information, your consent by choice to enter it.
If you contact us (enquiry form, email, or phone). Your name, contact details, and the content of your enquiry, used to respond to you and, if you become a client, to onboard you. Legal basis: legitimate interests, and steps taken at your request before entering a contract.
If you book a call via Calendly. Your name, email, and chosen meeting time are collected by Calendly on our behalf. See Calendly's own privacy policy for how they handle this. Legal basis: legitimate interests.
Cookies. We do not run our own analytics, advertising, or tracking cookies. If you click "Book a call," we load Calendly's booking widget, which sets a number of cookies on Calendly's domain to operate scheduling and, based on Calendly's own configuration, cookies used for analytics and advertising measurement by Calendly and its own sub-processors (including Google, Segment/Amplitude, and Clearbit). These are only set if you actively click "Book a call" — they are never set by simply browsing the site. See Calendly's own cookie and privacy policy for details of what they set and why.
Who else sees it
We use the following providers to run this site and process the data above. Some are based outside the UK; where they are, we rely on an adequacy decision or standard contractual clauses with the UK addendum.
| Provider | Purpose | Location |
|---|---|---|
| Netlify | Website hosting | EU/US |
| Vercel | Demo chat application hosting | EU/US |
| Supabase | Demo chat conversation storage | EU (Frankfurt) |
| Anthropic | AI model generating demo chat responses | US |
| Resend | Enquiry email delivery | US |
| Calendly | Call booking | US |
| Google Workspace | Email correspondence (admin@cilio.co.uk) | EU/US |
We do not sell your personal data, and we do not use it to train AI models.
How long we keep it
Demo chat conversations: deleted after 90 days. Enquiry and contact data: kept for as long as reasonably needed to respond to you and, if you become a client, as set out in our Terms and Conditions.
Your rights
Under UK GDPR you have the right to access, correct, delete, or object to our processing of your personal data, and to ask us to restrict processing or provide your data in a portable format. To exercise any of these, contact admin@cilio.co.uk. You also have the right to complain to the Information Commissioner's Office if you think we have handled your data incorrectly.
Changes to this notice
We may update this notice from time to time. The version on this page applies when you use the site.