At Glossed Clinic, we are committed to safeguarding the privacy of our clients and website visitors. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What We Collect
We may collect and process the following data:
- Full name, date of birth, and contact details
- Medical history and treatment suitability details
- Appointment history and treatment notes
- Payment information (processed securely via third-party providers)
- Browsing activity via cookies (for website analytics and improvement)
2. Why We Collect It
We collect this data to:
- Provide and personalise your treatments
- Maintain accurate medical and treatment records
- Manage your appointments and account
- Meet legal and regulatory requirements
- Send marketing communications (with your explicit consent)
3. Legal Grounds for Processing
We rely on the following lawful bases for processing your data:
- Consent – for marketing and promotional communication
- Contractual necessity – to deliver agreed-upon services
- Legal obligation – to comply with UK medical and consumer law
- Legitimate interest – for internal clinic operations, customer service, or defence in the event of a dispute
4. Marketing Consent & Withdrawal
We will only send marketing emails or texts if you have opted in.
You have the right to withdraw this consent at any time by:
- Clicking ‘unsubscribe’ in marketing emails
- Emailing us at info@glossedclinic.co.uk
Withdrawing marketing consent will not affect your past treatments or the retention of medical records where required by law.
5. How We Store and Protect Your Data
- Your personal data is stored on secure systems accessible only to authorised staff.
- We use encryption and regular backups to protect sensitive information.
- Treatment records are retained for a minimum of 7 years, as required by UK clinical standards.
6. Sharing Your Data
We do not sell or rent your personal information.
We may share your data with:
- Payment processors (e.g., Stripe, Square)
- Legal or regulatory authorities if required
- Email or SMS platforms (e.g., Mailchimp, Klaviyo) for marketing (only if you opt in)
All third parties must comply with strict data security and confidentiality obligations.
7. Your Rights
Under the UK GDPR, you have the right to:
- Access the data we hold about you
- Request correction of incorrect or incomplete data
- Request deletion (where legally appropriate)
- Object to or restrict processing in certain cases
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, email us at info@glossedclinic.co.uk
8. Cookies and Website Tracking
We use cookies to enhance your browsing experience and analyse website traffic. You can adjust cookie settings in your browser at any time.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date.
Contact Us
If you have questions about your personal data or this Privacy Policy, please contact us at: info@glossedclinic.co.uk
GLOSSED 