Cosmetics Doctor Privacy Policy
Who we are
Our website address is: https://cosmeticsdoctor.co.uk.
Our email is dramber@cosmeticsdotor.co.uk
We are registered with the ICO who are the UK’s independent body set up to uphold information rights.
ICO website: https://www.ico.org.uk
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you for one of the following reasons:
1. Your patient record.
2. Contacting you regarding your treatment or appointments.
We may share this information with
- Medical practitioners/staff at other organisations. E.g your GP.
- Cosmetic company/pharmceutical companies – To discuss your case/complications/for expert advice.
- In emergencies/to gain your previous medical records.
- Your next of kin in emergencies.
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent.
(b) We have a contractual obligation.
(c) We have a legal obligation.
(d) We have a vital/legitimate interest.
(e) We need it to perform a public task.
Media
All media on this website is owned by Cosmetics Doctor Ltd and you are not permitted to download or copy any items. If your images are on this site and you would like them removed. Please email us at dramber@cosmeticsdoctor.co.uk
Patients who modelled for treatments can withdraw their images at any time in writing, but you will then be required to pay the full balance of your treatment as per the model terms and conditions.
Cookies
If you visit our shopify login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
Embedded content from other websites
Articles/links on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if you had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
How we store your personal information
Your information is securely stored and encrypted.
All electronic devices are fingerprint and password protected.
All paper records are kept in a locked cabinet.
How long we retain your data
Medical records are kept for 12 years after the patient is deceased.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.