Privacy Statement

Privacy
Statement

1. Introduction

For the purpose of this document Pearl Aesthetics Limited trading as Pearl Aesthetics will be referred to as Pearl Aesthetics.

Pearl Aesthetics is committed to safeguarding the privacy of our clients, website visitors and staff; in this policy, we explain how we will treat your personal information.

Our goal is to be fully GDPR 2018 compliant.

2. Who are we

Pearl Aesthetics is registered in England and Wales under registration number 12041456 and our registered office is Aesthetics and Healthcare LTD.

We are registered as a data controller with the UK Information Commissioner’s Office and our data protection application number is (x).

You can contact us by using our website contact form, by email to [email protected] or by telephone on 07306 374 444. Our website is operated by Damteq Solutions Ltd.

What personal information we collect:

We may collect, store, share with necessary relevant authorities and make use of the following kinds of personal information:

Information that you provide to us when using our services or that is generated in the course of the use of those services.
Information relating to any purchases you make of our services.
Information contained in or relating to any communications that you send to us or send via email.
Information about your medical history and lifestyle.
Any other personal information that you choose to provide to us during consultations and associated services.
Information about staff employed by Pearl Aesthetics to manage their employment.

3. How we use your personal information

We may use your personal information to:

Send statements, invoices and payment reminders to you, and collect payments from you.
Send you confirmation letters and emails prior to your consultation and subsequent treatments.
Send you email notifications that you have specifically requested and information relating to aesthetic procedures.
Deal with enquiries and complaints made by or about you relating to our services.
To support your rights under Data Protection Law in relation to our use of your personal information (see section 9 below).
Manage your employment (where you are a member of staff employed by Pearl Aesthetics.

Administer our website and business including Personalising our website for you.

Enabling your use of the services available on our website.

4. Information consent

We will not without your express consent, supply your personal information to any third party for the purpose of theirs or any other third party’s direct marketing.

5. Personal data

The personal data we hold about you will only be used in line with the purposes detailed above and the legal basis for this will be either for the administration of a contract we have in place with you, or in line with the legitimate interests of our business in providing information governance and IT Security services (ensuring that this does not
impact on your rights or freedoms in relation to privacy) or disclosed as required by law.

6. Sensitive information

Pearl Aesthetics have no reason to process sensitive information (special categories or criminal convictions data) about you.

7. Disclosing personal information

We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers or subcontractors insofar as reasonably necessary for the purposes set out in this policy.

We may disclose your personal information:

To the extent that we are
required to do so by law.
In connection with any ongoing or prospective legal proceedings.
In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.
Except as provided in this policy, we will not provide your personal information to third parties.

8. International data transfers

Information that we collect will only be stored and processed within the UK and is protected by UK Data Protection laws. We may transfer data to other clinics and practitioners by email but only where necessary or relevant.

9. Retaining personal information

This section sets out our data retention policies and procedure, which are designed to help ensure that we comply with our legal obligations in relation to the retention and deletion of personal information.

Personal information that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

Notwithstanding the other provisions of this section, we will retain documents (including electronic documents) containing personal data:

To the extent that we are required to do so by law.
If we believe that the documents may be relevant to any ongoing or prospective legal proceeding.
In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk).
To support the ongoing business purposes of Pearl Aesthetics (with due consideration for the rights and freedoms of individuals privacy).
To archive for any future reference with relevance to the service provided.

If you would like further details of how personal data is retained by our organisation, please contact us directly.

10. Security of your personal information

We will take all reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.

We will store all the personal information you provide on our secure servers.

You acknowledge that the transmission of information over the internet is inherently insecure, and we cannot guarantee the security of data sent to us over the internet.

11. Your rights

You have a number of rights under the Data Protection Act including:

The right to be informed about the collection and use of your personal data e.g. via this privacy notice.
The right to access your personal data.
The right to have any inaccurate personal data rectified, or completed if it is incomplete.
The right to have your personal data erased in certain circumstances.
The right to request the restriction or suppression of your personal data in certain circumstances.
The right to data portability – to obtain and reuse your personal data for your own purposes across different services.
The right to object to our use of your information in certain circumstances e.g. for marketing or profiling purposes.

If you would like to access your own personal information or exercise any of the rights detailed above, please contact us by email to [email protected] or telephone 07306 374 444.
In the majority of cases, we will respond to your request within 30 days after receiving the necessary information required to deal with your request.

We may ask you to supply appropriate evidence of your identity (for this purpose, we will usually accept a photocopy of your passport or driving licence, plus an original copy of a utility bill showing your current address) and any additional information to help us to deal with your request effectively.

There may be some exemptions to dealing with your rights as specified in Data Protection law, but we will ensure you are fully informed of this within 30 days of receiving your request.

We do not carry out any profiling or automated decision making based on your personal data.

Full information on your rights under the Data Protection Act can be found from the following link:
https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/

12. Amendments

We may update this policy from time to time as may be necessary to comply with updated laws or as we see necessary to comply with existing and/or updated laws.

You should check this page occasionally to ensure you are happy with any changes to this policy.

This policy will be updated in line with the EU General Data Protection Regulation once these have been translated into UK law.

13. If you have a concern about
how your data is being handled

If you are unhappy about the use of your personal data, then please contact us directly and we will try to resolve your concern.

You can also raise a concern directly with the Information Commissioner’s Office and more detail on how to do this can be found from the following link: https://ico.org.uk/concerns/

14. Further information

If you have any questions which you feel have not been answered by this Privacy Notice you can contact us by email to [email protected] or telephone 07306 374 444.