Privacy Statement
Skin Deep Clinic (Shrewsbury) Limited
Data controller Wendy Hartwig
The personal data you provide will be used for the purposes of facilitating and administering your treatment and care by us.
Name
Date of birth
Address
Telephone
Next of kin
GP
Occupation
Medical history
Records of assessment, photographs documenting before and after treatment episodes, consent and treatment you receive will be retained as part of your medical record.
Feedback you provide can be anonymised and will be used to evaluate and improve the services provided by the clinic and for audit purposes.
We may retain records of communication to us and from us by telephone and email if the information exchanged needs to be included in your medical record.
Your contact details will only be used to send information that may be of interest to you with your consent and you may withdraw consent by clicking ‘unsubscribe’ at any time.
If you contact us by email you should be aware that emails you send or receive may not be protected in transit.
Via social media
We and any 3rd party social media management companies we may work with will be able to see the personal profiles of whoever we engage with on social media; the level of personal information available will be dependent on the individual’s privacy settings. The interactions are only stored on the relevant social media platform and not downloaded for use anywhere else.
By Telephone
If you make an enquiry by telephone and you are not known to us, we request basic contact information for the purposes of providing our service; making an appointment for you, populating a new record, sending directions, appointment confirmations and treatment information if requested. You may unsubscribe once you have received any requested information, if you do not wish to hear from us again.
In addition, once they are provided, we will retain and process your personal data to the extent it is necessary to enable us to establish, exercise or defend legal claims.
Persons with whom we need to share data in order to provide our service;
We will share your personal data with the following external third parties in order to provide treatment and care:
Timely Limited P.O Box 13112 Dunedin 9018 New Zealand (appointment booking system) https://time.ly/tos/privacy-policy
QuickBooks Accounting Software https://quickbooks.intuit.com/eu/privacy-policy/
Stewart Associates (Shrewsbury) Limited Chartered Accountants https://www.saltd.co.uk/privacy.asp
Pharmacies when a prescription order is necessary for the product or medicine you require.
Regulators and government authorities if we are required to do so by law or if the authority requests it and we regard that request to be reasonable.
Storing your data
Your medical record and personal data will be maintained securely and archived securely after (2 years) and will be stored for a period of ten years as advised by insurance providers. It is our lawful duty to retain medical records.
Your Rights
• You have a right to expect us to retain accurate records, and for us to act upon any request to rectify inaccuracies in your personal information as detailed above.
• You have a right to require us to erase your personal data without undue delay on certain grounds e.g. where it is no longer necessary based on the reason it was originally recorded or where you withdraw your consent and there is no other legal grounds for processing.
• By providing the information requested you are providing explicit consent but you have the right to withdraw consent at any time. To do so, please email [email protected]. Please note if you do so, all your personal data will be erased other than that which may be required to enable us to establish, exercise or defend legal claims.
• You have a right to request a copy of your personal data held by us.
Should you have any complaints or concern regarding our treatment of your personal data please don’t hesitate to contact Wendy Hartwig or you may make a complaint directly to The Information Commissioners Office www.ico.org.uk
