Blemish Clinic Privacy Policy

Our contact details

Name: Blemish Clinic

Address: 40 Market Street, Edenfield, Bury BL0 0JN

Phone Number: 01706 822689

E-mail: office@blemishclinic.co.uk

Website: www.blemishclinic.co.uk

Privacy Policy dated 5/5/2022

The type of personal information we collect

We currently collect and process the following information:

Personal data - Name, Date of birth, Address, Contact telephone number, email address, social media account. We may process this to enable us to get in touch with you.

Transaction Data - We may process information relating to transactions, including purchases of goods and/or services, that you enter into with us and/or through our website The transaction data may include your name, your contact details, your payment card details (or other payment details) and the transaction details. The source of the transaction data is you and/or our payment services provider.

Medical Data – The medical data our clinic collects is specifically about your personal health, this includes information about your past medical history and current medication. We may carry out medical investigations and we will store the results of these tests in your medical records. We may receive correspondence from other medical professionals regarding your medical health, these will be stored in your medical records.

Photographs – We will process photographs of treatment areas for the purpose of diagnosis, treatment and review.

Usage Data - We may process data about your use of our website and services. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• For communication
  We may process contact data, account data, customer relationship data, transaction data and/or communication data for the purposes of managing our relationships, communicating with you by email, SMS, post, and/or telephone, providing support services and complaint handling.
• For Operations
  We may process your personal data for the purposes of operating our website, the processing and fulfilment of orders and providing services, generating bills, invoices and other payment related documents and for credit control
• Direct Marketing
  We may process contact data, account data, profile data, customer relationship data and/or transaction data for the purposes of creating, targeting and sending direct marketing communications by email, SMS, post and/or fax and making contact by telephone for marketing-related purposes.
• Medical Treatment
  Information regarding medical history is used to diagnose and recommend the most appropriate treatment options.

We may share this information with;

• Any member of our group of companies
• Insurance or professional advisors for the purpose of obtaining or maintaining insurance coverage, managing risks, obtaining professional advice.
• Financial transactions may be shared with our payment service providers ie Stripe, Timely Pay, World Pay, Go Cardless
• Clinic management software providers for the purpose of managing the business systems effectively
• Other medical Professionals for the purpose of your treatment and medical management

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

1. Your consent. You are able to remove your consent at any time. You can do this by contacting office@blemishclinic.co.uk
2. We have a contractual obligation.
3. We have a legitimate interest.
4. A legal obligation

How we store your personal information

• Your information is stored securely on secure servers, personal computers and mobile devices and in secure manual record keeping systems.
• We will take appropriate technical and organisational measures to secure your personal data and to prevent the loss, misuse or alteration of your personal data
• Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.
• We keep personal data, transaction data, medical data, photographs and usage data for a minimum period of 1 year following the date of the most recent contact between you and us and for a maximum period of 25 years following that date.
• Disposal of data is by secure deleting from all systems and devices and shredding hard copy files

Security of Personal Data

You acknowledge that the transmission of unencrypted (or inadequately encrypted) data over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet.

Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you. Please contact us at office@blemishclinic.co.uk 01706 822689 and or Blemish clinic, 40 Market Street, Edenfield, Bury BL0 0JN if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at

Jan Birch
Blemish Clinic
40 Market Street
Edenfield
Bury
BL0 0JN

Telephone: 01706 822689

Email: office@Blemishclinic.co.uk

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk