This notice explains what information ilitsociety.org collects, why, and what we do with it. The short version: we collect only what you type into the site, we do not run advertising or analytics trackers, and we never sell personal information.
Who we are
The site is run by ILIT Society. For anything to do with your information, write to info@ilitsociety.org.
What we collect, and why
Searching for a practitioner
The place you search for (a zip code or a city) and any filters you choose are part of the page address while you search. If you choose “use my location”, your browser asks your permission and then sends your approximate coordinates to the site for that one search. We do not store searches or locations against you.
Requests to a practice
When you ask a listed practice for a consultation or an appointment, we collect the details you enter: your name, email address, telephone number, the practice you chose and anything you write in the message. We send the request to the practice by email, with your email address as the reply address, and send you a copy. We also keep a copy in the site’s administration area so that the Society can follow up on requests that go unanswered. The practice’s own privacy notice governs what it does with your request after that.
Applying for a listing
Practitioners who apply give us professional details: names, qualifications, certifications, office addresses, telephone numbers, website, the allergens treated, a photograph and a contact email address. We use them to assess the application and, if it is approved, publish them in the directory. Office addresses are converted to map coordinates using OpenStreetMap’s Nominatim service; only the business address is sent.
Searching the Journal
Journal searches are answered on the spot and are not stored.
Rating a practitioner
When you rate a listing we store the number of stars and a one-way hash of your IP address, so that a second rating from the same connection within thirty days replaces the first. We do not ask for your name or email address.
Technical information
Like any website, our hosting provider records standard technical details of each request (IP address, browser type, page requested, time) for security and troubleshooting. To limit abuse, the site also keeps a short-lived count of form submissions per IP address, which is discarded within an hour.
Cookies and tracking
We do not use advertising cookies, analytics services or social-media trackers. The site itself only sets cookies when a member of staff signs in to administer it. Two services we embed may set their own cookies or collect technical data, under their own privacy policies:
- Google Maps draws the maps on the search and practice pages. When a map loads, your browser contacts Google and Google may record your IP address and set cookies. If Google Maps is unavailable, maps are drawn with OpenFreeMap, which does not set cookies.
- Google Fonts supplies the typeface. Your browser fetches it from Google’s servers, which see your IP address.
Who we share information with
- The practice you chose, when you send it a request. We do not share requests with any other practice.
- Service providers that run the site for us: our hosting provider (DigitalOcean, servers in New York), Google Workspace for email, Google Maps and Google Fonts as described above, and OpenStreetMap’s Nominatim for converting practice addresses to map positions. They process information only to provide those services.
- The public, for the professional details of approved listings, which are published in the directory.
- Authorities, if the law requires it.
We do not sell personal information and we do not share it for advertising.
Badges on practice websites
Listed practices may place our badge image on their own websites. The badge is loaded from our server, so our hosting provider’s technical logs may record the IP addresses of visitors to those sites. We do not use that information for anything.
How long we keep information
- Requests to practices stay in the site’s administration area until staff delete them, which we aim to do once the practice has responded; the emails are kept in our mailbox under our normal retention.
- Applications are kept while they are assessed and, if approved, for as long as the listing is live.
- Hosting logs are kept for a limited period by our hosting provider for security purposes.
Your choices and rights
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, by writing to info@ilitsociety.org. We will answer within thirty days. If you are a practitioner, you can also ask for your listing to be changed or removed at any time.
If you are in the European Economic Area or the United Kingdom, the legal basis for processing your request is that it is necessary to carry out the step you asked for; for listings and technical logs, it is our legitimate interest in running an accurate and secure directory. You also have the right to complain to your data protection authority. If you are a California resident, you have the right to know, delete and correct personal information, and the right not to be discriminated against for exercising those rights; we do not sell or share personal information as defined by California law.
Children
The site is for adults. Requests about a child’s treatment should be sent by a parent or guardian. We do not knowingly collect information from children under thirteen; if you believe a child has sent us information, tell us and we will delete it.
Security
The site is served over an encrypted connection (HTTPS), access to the administration area is limited to the people who run the Society, and requests are sent to practices by email only. No method of transmission is completely secure, so please do not include more detail in a request than the practice needs to call you back.
Changes to this notice
We will update this notice when the site changes. The date at the top of the page shows the latest revision.