Privacy Notice - Customers

Introduction

This privacy notice lets you know what happens to any personal data that you give to us, or any information that we may collect from you or about you from other organisations. 

This privacy notice applies to personal information processed by or on behalf of the company.

This Notice explains:

• Who we are and how we use your information
• What kinds of personal information about you we hold and use (process)
• The legal grounds for our processing of your personal information (including when we share it with others)
• What should you do if your personal information changes?
• For how long your personal information is retained / stored by us?
• What are your rights under Data Protection laws

The General Data Protection Regulation (GDPR) and the Data Protection Act 2018 (DPA 2018) became law on 25th May 2018. The GDPR is a single EU-wide regulation on the protection of confidential and sensitive (special) information, the DPA 2018 deals with elements of UK law that differ from the European Regulation, both came into force in the UK on the 25th May 2018, repealing the previous Data Protection Act (1998). 

For the purpose of applicable data protection legislation (including but not limited to the General Data Protection Regulation (Regulation (EU) 2016/679) (the "GDPR"), and the Data Protection Act 2018 the company responsible for your personal data is Dr Melanie’s Well-being Ltd.

This Notice describes how we collect, use and process your personal data, and how in doing so, we comply with our legal obligations to you. Your privacy is important to us, and we are committed to protecting and safeguarding your data privacy rights.

What information to we store and why?

Dr Melanie’s Well-being Ltd will be what’s known as the ‘Controller’ of your personal data. We collect basic personal data about you and location-based information.  This does include name, address and contact details such as email and mobile number etc. 

We will also collect sensitive confidential data known as “special category personal data”, in the form of health information, in order to make sure there are no contradictions to your treatment; and legal requirements.

It is your right to refuse to provide this information, unfortunately we will not be able to offer you the selected treatment, as this information is a legal requirement for our insurance.

Provided we have your consent, we may occasionally send you texts, emails or messages with our latest news and offers. You can revoke this consent at any time.

We have a legal obligation to retain your records for seven years after your most recent appointment. After this time your records will be destroyed in a method compliant with GDPR legislation.

How do we maintain the confidentiality of your records? 

We are committed to protecting your privacy and will only use information collected lawfully in accordance with: 

• Data Protection Act 2018
• The General Data Protection Regulations 2016

Every member of staff who works for Dr Melanie’s Well-being Ltd has a legal obligation to keep information about you confidential. 

We will not disclose your information to any third party without your permission unless there are exceptional circumstances (i.e. life or death situations).

All employees and sub-contractors engaged by the company are asked to sign a confidentiality agreement. 

We do not hold paper records. Records held on Dr Melanie’s Well-being Ltd computer systems and mobile devices are password protected and only accessible by employees of the company. All employees have an up to date Disclosure and Barring Service (DBS) check.

If you wish to contact us via social media, this is password protected but for historic issues with privacy associated with social media sites, you may wish to think about what you choose to send us via this method.

You have the right to see what personal data we hold and you may ask Dr Melanie’s Well-being Ltd to correct any factual errors. Provided the legal minimum period has elapsed, you may also ask the company to erase your records completely.

Why do we need your information?

As well as using your health information to ensure the treatments we provide do not put you at risk, we will also collect the following information;

• Your IP address
• Your email address
• Your name
• Your telephone number
• Your address
• The date and time you contacted us
• The details of the treatments you have enquired about and/or booked
• Your location, time-zone and language settings
• The sign-up course from which you joined our customer database
• Emergency contact details
• Consent forms
• Before and after treatment pictures, some of which will be used to aid with effective lip mapping services

Consent and your rights

Even if we already hold your personal data, you still have various rights in relation to it. To get in touch about these, please contact us. We will seek to deal with your request without undue delay, and in any event in accordance with the requirements of any applicable laws. Please note that we may keep a record of your communications to help us resolve any issues which you raise.

We only process your data with your consent and you always have the right to withdraw that consent, at any time. You can also modify your consent preferences at any time.

You may also send us a request to access, amend or delete your personal information. To do this, send an email, being sure to state clearly in the subject line that your email concerns a privacy issue. To ensure that we are only acting on requests that have been genuinely made by you, please be aware, we may request additional information to verify your identity.

You have the right to object to our use of your personal data. To do so, please email us, clearly stating that you wish to exercise your right to object. If you are not happy in any way with our use of your information or believe your rights have been infringed, please do not hesitate to inform us and we will do our utmost to rectify the situation.

Anonymised information

Sometimes we may provide information about you in an anonymised form. Such information is used on the company website and will be limited to;

• Feedback on our services
• Pictures to showcase the effectiveness of our treatments

If we share information for these purposes, then none of the information will identify you as an individual and cannot be traced back to you. 

What should you do if your personal information changes?

You should tell us so that we can update our records please contact the company as soon as any of your details change, this is especially important for changes of address or contact details (such as your mobile phone number).

We will from time to time ask you to confirm that the information we currently hold is accurate and up-to-date.

Our website

The only website this Privacy Notice applies to is the Dr Melanie’s Well-being Ltd website. If you use a link to any other website from the company’s website then you will need to read their respective Privacy Notice. We take no responsibility (legal or otherwise) for the content of other websites.

The company’s website uses cookies. For more information on which cookies we use and how we use them, please see our Cookies Policy.

Objections / Complaints 

If you are happy for your data to be used for the purposes described in this privacy notice, then you do not need to do anything.  If you have any concerns about how your data is shared, would like to know more about your rights in respect of the personal data we hold about you, then please contact the owner using the details below. 

info@drmelanie.co.uk

Changes

It is important to point out that we may amend this Privacy Notice from time to time.  If you are dissatisfied with any aspect of our Privacy Notice, please contact Dr Melanie’s Well-being Ltd.

©Copyright. All rights reserved