Privacy Policy

Introduction

Dr. Harry Clinic is committed to protecting the privacy and confidentiality of our patients’ personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

We understand that your personal information is important to you, and we are committed to handling it with the highest standards of care and security. This policy applies to all personal information we collect through our website, clinic visits, and other interactions with our services.

Information We Collect

Personal Information

We collect personal information that you provide to us directly, including:

•Name, address, and contact details

•Date of birth and age

•Medical history and health information

•Treatment preferences and aesthetic goals

•Payment and billing information

•Communication preferences

Medical Information

As a medical practice, we collect and maintain detailed medical information including:

•Medical history and current health status

•Previous treatments and procedures

•Allergies and medical conditions

•Medication information

•Treatment records and outcomes

•Clinical photographs (with consent)

Website Information

When you visit our website, we may collect:

•IP address and browser information

•Pages visited and time spent on site

•Referral sources and search terms

•Cookie and tracking information

How We Use Your Information

Medical Care and Treatment

We use your personal and medical information to:

•Provide medical consultations and treatments

•Develop personalised treatment plans

•Monitor treatment progress and outcomes

•Ensure patient safety and appropriate care

•Maintain accurate medical records

Communication and Service

We use your information to:

•Schedule appointments and send reminders

•Provide treatment information and aftercare instructions

•Respond to enquiries and provide customer service

•Send relevant health and treatment information

•Process payments and billing

Legal and Regulatory Compliance

We may use your information to:

•Comply with medical and legal requirements

•Maintain professional standards and regulations

•Respond to legal requests and investigations

•Protect our rights and interests

Information Sharing

Medical Professionals

We may share your information with:

•Other healthcare providers involved in your care

•Medical specialists for referrals or consultations

•Laboratory services for testing requirements

•Emergency medical services if required

Service Providers

We may share information with trusted service providers who assist with:

•Payment processing and billing services

•IT support and data management

•Appointment scheduling systems

•Marketing and communication services

Legal Requirements

We may disclose information when required by:

•Legal obligations and court orders

•Regulatory authorities and professional bodies

•Law enforcement agencies

•Emergency situations requiring disclosure

Data Security

Security Measures

We implement comprehensive security measures including:

•Encrypted data transmission and storage

•Secure access controls and authentication

•Regular security audits and updates

•Staff training on data protection

•Physical security of clinic premises

Data Retention

We retain personal information for:

•Medical records: As required by professional regulations (typically 8 years minimum)

•Financial records: As required by tax and accounting regulations

•Communication records: For reasonable periods to support ongoing care

•Website data: For limited periods as required for functionality

Your Rights

Access and Correction

You have the right to:

•Access your personal information

•Request corrections to inaccurate data

•Receive copies of your medical records

•Understand how your information is used

Data Portability

You have the right to:

•Receive your data in a portable format

•Transfer your information to other providers

•Request data transmission to third parties

Deletion and Restriction

You have the right to:

•Request deletion of personal information (subject to legal requirements)

•Restrict processing of your data

•Object to certain uses of your information

•Withdraw consent for optional processing

Cookies and Website Tracking

Cookie Usage

Our website uses cookies to:

•Improve website functionality and user experience

•Analyse website traffic and usage patterns

•Provide personalised content and services

•Support marketing and advertising efforts

Cookie Management

You can manage cookies through:

•Browser settings and preferences

•Cookie consent management tools

•Opt-out mechanisms for tracking

•Third-party cookie controls

Marketing Communications

Consent-Based Marketing

We only send marketing communications with your explicit consent, including:

•Treatment information and updates

•Special offers and promotions

•Educational content and health tips

•Clinic news and announcements

Opt-Out Options

You can opt out of marketing communications by:

•Using unsubscribe links in emails

•Contacting us directly

•Updating your communication preferences

•Managing your account settings

Third-Party Services

External Providers

We may use third-party services for:

•Website hosting and maintenance

•Payment processing and billing

•Appointment scheduling systems

•Communication and marketing tools

Data Protection

All third-party providers are required to:

•Maintain appropriate data protection standards

•Comply with GDPR and privacy regulations

•Implement security measures for data protection

•Provide transparency about data usage

International Data Transfers

Data Location

Your personal information may be processed in:

•The United Kingdom

•European Economic Area countries

•Other countries with adequate protection levels

•Secure international transfer mechanisms

Transfer Safeguards

International transfers are protected by:

•Adequacy decisions from regulatory authorities

•Standard contractual clauses

•Binding corporate rules

•Other approved transfer mechanisms

Children’s Privacy

Age Restrictions

Our services are intended for adults, and we:

•Do not knowingly collect information from children under 16

•Require parental consent for minors

•Implement additional protections for young patients

•Comply with specific regulations for children’s data

Changes to This Policy

Policy Updates

We may update this Privacy Policy to:

•Reflect changes in our practices

•Comply with new legal requirements

•Improve clarity and transparency

•Address new technologies and services

Notification of Changes

We will notify you of significant changes through:

•Website notifications and updates

•Email communications to registered users

•Clinic notices and announcements

•Direct communication for material changes

Contact Information

Data Protection Enquiries

For questions about this Privacy Policy or your personal information, contact:

Dr. Harry Clinic

info@drharryclinic.co.uk

Regulatory Complaints

You have the right to lodge complaints with:

Information Commissioner’s Office (ICO) Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF Tel: 0303 123 1113 Website: https://ico.org.uk/