This Privacy Policy explains how Harley St Skin Clinic Ltd collects, uses, stores and shares your personal data when you use our website, contact us, enquire about our services, book appointments, or apply for finance in connection with our services. It also explains your rights under the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
By using our website or providing your information to us, you acknowledge the practices described in this Privacy Policy.
Interpretation and Definitions
Interpretation
The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Affiliate means an entity that controls, is controlled by or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
- Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to Harley St Skin Clinic Ltd, 8 Harley Street, London, W1G 9PU.
- Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history on that website among its many uses.
- Country refers to: United Kingdom.
- Data Controller means the organisation that decides how and why your personal data is processed. For the purposes of this Privacy Policy, Harley St Skin Clinic Ltd is the Data Controller of your personal data unless stated otherwise.
- Device means any device that can access the Service such as a computer, a cellphone or a digital tablet.
- Personal Data is any information that relates to an identified or identifiable individual.
- Service refers to the Website.
- Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on behalf of the Company, perform services related to the Service, or assist the Company in analysing how the Service is used.
- Special Category Data means more sensitive personal data, such as information concerning health, which requires additional protection under data protection law.
- Third-party Social Media Service refers to any website or social network website through which a User can log in or create an account to use the Service.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website refers to Harley Street Skin Clinic, accessible from https://www.harleystreetskinclinic.com/.
- You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, contacting Us, making an enquiry, booking an appointment, or applying for finance, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. This may include:
- First name and last name
- Email address
- Phone number
- Address, postcode and city
- Date of birth
- Information You provide in enquiry forms, booking forms or contact forms
- Finance application information where relevant to Your request for finance
- Health-related information You choose to provide to Us where relevant to treatment enquiries, consultations or services
- Usage Data
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device’s Internet Protocol address (for example IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
Information from Third-Party Social Media Services
The Company may allow You to create an account and log in to use the Service through the following Third-party Social Media Services:
- Google
- Facebook
- Instagram
- X / Twitter
- LinkedIn
If You decide to register through or otherwise grant Us access to a Third-Party Social Media Service, We may collect Personal Data already associated with Your account with that service, such as Your name, email address, activities or contact list associated with that account.
You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service’s account. If You choose to provide such information, You are giving the Company permission to use, share and store it in a manner consistent with this Privacy Policy.
Tracking Technologies and Cookies
We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Tracking technologies used may include cookies, tags, scripts and web beacons to collect and track information and to improve and analyse Our Service.
- Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
- Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics.
Cookies can be “Persistent” or “Session” Cookies. Persistent Cookies remain on Your computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.
We use both Session and Persistent Cookies for the purposes set out below:
- Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features.
- Cookies Policy / Notice Acceptance Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies identify if users have accepted the use of cookies on the Website.
- Functionality Cookies
Type: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow Us to remember choices You make when You use the Website.
- Analytics / Performance Cookies
Type: Persistent Cookies
Administered by: Us or third-party providers
Purpose: These Cookies help Us understand how visitors use the Website so We can improve performance, content and user experience.
For more information about the cookies We use and Your choices regarding cookies, please visit our Cookies Policy or the Cookies section of this Privacy Policy.
How We Use Your Personal Data
The Company may use Personal Data for the following purposes:
- To provide and maintain our website and services, including monitoring usage of our Service.
- To respond to enquiries and manage Your requests.
- To arrange consultations, appointments and related customer service communications.
- To contact You by email, telephone calls, SMS or other equivalent forms of electronic communication regarding Your enquiry, appointments, services, finance enquiries, or other service-related matters.
- To provide You with information about services, treatments, offers and events similar to those You have already enquired about or purchased, where We are permitted to do so by law and where You have not opted out.
- To assess, process and administer finance requests or applications connected with Our services.
- To comply with legal and regulatory obligations.
- For internal administration, quality assurance, staff training, complaint handling, data analysis, auditing, fraud prevention and security.
- For business transfers, including merger, sale, restructuring, acquisition, dissolution or similar event.
Lawful Bases for Processing
We process your personal data under one or more of the following lawful bases under the UK GDPR, depending on the circumstances:
- Consent where You have given Us clear permission to process Your personal data for a specific purpose.
- Contract where processing is necessary to take steps at Your request before entering into a contract or to perform a contract with You.
- Legal obligation where processing is necessary for Us to comply with the law.
- Legitimate interests where processing is necessary for Our legitimate interests or those of a third party, provided Your interests and fundamental rights do not override those interests.
Where We process health information or other special category data, We will only do so where We have a valid additional condition under data protection law, for example where processing is necessary for the provision of health or treatment-related services, for the establishment, exercise or defence of legal claims, or where You have given explicit consent, as applicable.
Sharing Your Personal Data
We may share Your personal information in the following situations:
- With Service Providers: We may share Your personal information with Service Providers who help Us operate Our website, manage communications, host systems, analyse website use, or otherwise support Our business.
- With third-party lender(s) or finance providers: If You ask about finance options, request credit, or apply for finance in connection with Our services, We may share the personal data necessary for that purpose with third-party lender(s), credit brokers, finance providers or their service providers so that they can assess eligibility, process finance applications, perform identity or fraud checks, administer agreements, and comply with their legal and regulatory obligations.
- With professional advisers and regulators: We may share Your information with legal advisers, insurers, accountants, auditors, regulators, law enforcement agencies or courts where necessary to comply with legal obligations or protect Our rights.
- For business transfers: We may share or transfer Your personal information in connection with, or during negotiations of, any merger, sale of Company assets, financing or acquisition of all or a portion of Our business.
- With Affiliates: We may share Your information with Our affiliates, in which case We will require those affiliates to honour this Privacy Policy.
- With business partners: We may share Your information with business partners where necessary to provide products, services, promotions or finance-related services You have requested.
- With Your consent: We may disclose Your personal information for any other purpose with Your consent.
We do not sell Your personal data.
Retention of Your Personal Data
We will retain Your Personal Data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements, resolving disputes, and enforcing Our legal agreements and policies.
How long We keep data depends on the type of information and the reason We hold it. For example, enquiry data, finance enquiry data, booking information, treatment-related records, complaint records and website usage data may all be retained for different periods depending on legal, operational and regulatory requirements.
Where data is no longer required, We will securely delete or anonymise it.
International Transfers
Your information may be processed at the Company’s operating offices and by selected service providers. This means that Your information may be transferred to, and stored at, a destination outside the United Kingdom.
Where We transfer personal data outside the UK, We will ensure that appropriate safeguards are in place as required by applicable data protection law.
Your Data Protection Rights
Under data protection law, You may have the following rights, depending on the circumstances:
- The right to be informed about how Your personal data is used
- The right of access to the personal data We hold about You
- The right to have inaccurate personal data corrected
- The right to have personal data erased in certain circumstances
- The right to restrict processing in certain circumstances
- The right to object to processing in certain circumstances
- The right to data portability in certain circumstances
- Rights relating to automated decision-making and profiling, where applicable
- Where We rely on consent, the right to withdraw consent at any time
You can exercise Your rights by contacting Us using the details below. We may ask You to verify Your identity before acting on a request.
Delete Your Personal Data
You have the right to request that We delete the Personal Data that We hold about You in certain circumstances.
You may also contact Us to request access to, correct, update or delete personal information that You have provided to Us. Please note that We may need to retain certain information where We have a legal obligation or other lawful basis to do so.
Disclosure of Your Personal Data
Business Transactions
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law enforcement and legal requirements
Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities, regulators, courts or law enforcement agencies.
The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of the Company
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of Users of the Service or the public
- Protect against legal liability
Security of Your Personal Data
The security of Your Personal Data is important to Us. We use appropriate technical and organisational security measures designed to protect personal data. However, no method of transmission over the internet or method of electronic storage is completely secure, and We cannot guarantee its absolute security.
Children’s Privacy
Our Service is not directed to children under the age of 13, and We do not knowingly collect personal data from children under 13 through the website without appropriate consent or other lawful basis.
If You are a parent or guardian and You believe that a child has provided Us with Personal Data, please contact Us so that We can take appropriate action.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the privacy policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, You can contact us:
Contacting the ICO
If You are unhappy with how We use Your personal data, We would appreciate the chance to address Your concerns first. You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
- Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Helpline: 0303 123 1113
- Website: https://ico.org.uk/
