We are committed to protecting your privacy, and the privacy of our website visitors. Any information that will be collected and will be used in accordance with the General Data Protection Regulation and the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. Information gathered will not be shared with any third party companies for direct marketing.
WHO WE ARE
This Privacy Notice is provided by Dentelle Aesthetics. This Notice applies to all data subjects whose personal data is collected by Dentelle Aesthetics
Our GDPR owner and data protection representative is Clare Quinn who will deal with all enquiries concerning Dentelle Aesthetics use of your personal data and can be contacted directly at firstname.lastname@example.org The purpose of this notice is to inform you (data subjects) of what personal data we collect about you in line with the requirements of GDPR.
HOW WE COLLECT DATA
Dentelle Aesthetics will generally only receive personal data from the individual concerned directly in the course of conducting business. This may be in person, via email, web form or telephone. However, in some cases personal data will be supplied by third parties (for example online booking platforms or job sites) but only when you have specifically booked a service/treatment or responded to a vacancy offered by Aesthetics Lab on a third party platform.
THE DATA WE COLLECT
In the course of our business Dentelle Aesthetics will collect certain types of personal data which will include:
Names, postal addresses, telephone numbers, email addresses, and other contact details (telephone calls may also be recorded for training purposes).
Financial information which could include bank details and credit card details
Personnel files in connection with employment and recruitment
Information supplied in the medical questionnaire about a person’s health and relevant medical conditions that could affect the suitability of treatments
Still images of clients during the treatment process (to assess before and after) and any video captured by the CCTV security system installed at our premises.
Technical information such as cookies, IP address, browser type etc when you visit our website
For any disclosure of information of another person, you must have full consent of the person to disclose and process their personal information in accordance with this policy.
Where Aesthetics Lab is required to process the data of a child (individuals under the age of 16) we will ask for consent to be authorised by the holder of parental responsibility for the child.
WHY WE PROCESS YOUR PERSONAL DATA
During the course of our business, we need to process a wide range of personal data and we will only do so in accordance with the law. Some of this is done to fulfil Dentelle Aesthetics’s legal obligations including those related to its employees or contractual obligations such as those to its insurers. In other cases, we will process data where it is in our legitimate interest except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Aesthetics Lab believes the following use will fall within the category of legitimate interest:
For the purpose of recommending and providing treatments & products
For the purpose of providing information on pre- and aftercare before and following treatment.
For the purpose of confirmation and reminding individuals of appointments via email & text messages.
For the purpose of our newsletter and other relevant offer emails updating clients on new products and services offered by Dentelle Aesthetics. You can opt out of this at any time.
For the purpose of security to protect our websites, infrastructure and premises from attacks or threats and to report any illegal activities
Given that we need to collect health information and this is classed as a special category of personal data we need to identify a specific condition under Article 9. The condition on which we rely is that processing is necessary for the purposes of providing health care or treatment.
WHO HAS ACCESS TO DATA & WHO WE SHARE IT WITH
Personal information gathered will not be shared with any third party companies for direct marketing. Usually, personal data collected by Dentelle Aesthetics will remain within Dentelle Aesthetics and will be processed by appropriate employees. Some of the processing is carried by third parties such as website developers, cloud storage providers but is at all times kept securely
THIS PRIVACY NOTICE
If you believe that we have not complied with our privacy notice you may complain to the Information Commissioner’s office (ICO) although as recommended by the ICO please allow Dentelle the opportunity to resolve the matter before involving the regulator.
All queries and complaints in the first instance should be directed by email to Clare Quinn at email@example.com