The Dermatography Clinic Privacy Notice
Our contact details:
Name: Renée Cleovoulou
Address: The Dermatography Clinic, 5 Puma Court, Spitalfields, London E1 6QG.
Phone Number: 07961180949
What type of information we have
We currently collect and process the following information:
- Personal identifiers, contacts and characteristics (for example, name and contact details)
- Customer Consent
- Before and after photos
How we get the information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
- You contacted us to ask for information or to schedule an appointment
- You filled in a customer consent form
- We took before and after pictures as part of your treatment process
We also receive personal information indirectly, from the following sources in the following scenarios:
- You visited our website or social media channels
In addition, we may use third party services such as Google Analytics that collect, monitor and analyse this type of information in order to increase our service’s functionality. These third party service providers have their own privacy policies addressing how they use such information.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information is:
We have a legal obligation.
What we do with the information we have
We use the information that you have given us in order to provide safe standard of practice.
We do not sell it or share it with others. Client privacy is an important aspect of our business and we take it seriously.
We may share information only to comply with law or to protect the rights, property or safety of The Dermatography Clinic, our users or others. Or with companies and organisations for fraud and credit risk reduction or when believe release is appropriate.
How we store your information
Your information is stored electronically and safely. We use Waiver Forever a modern secure waiver signing solution for businesses to process consent forms. Cloud storage safeguards your data and results in 99.9% uptime reliability. All data is transmitted over SSL technology and protected using AES 256 encryption, both of which meet or exceed U.S. government standards for data security.
Waiver Forever have their own privacy policies addressing how they use such information. Although we believe that the cloud is safer than paper no method of transmission over the internet, or method of electronic storage is 100% secure and waiver forever are unable to guarantee the absolute security of the personal information.
We keep the personal information you provide to us and treatment details including consent forms and before and after pictures only for as long as necessary to fulfil the purposes for which the information was collected, or as required by law. We are required by law to retain treatment details for 10 years. We will then dispose your information by deleting the data.
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us at firstname.lastname@example.org if you wish to make a request.
You can also complain to any local Supervisory Authority about how we process your personal data.