We collect and process the following types of information:

Personal Information:

Medical Information:

Treatment Records:

Financial Information:

Technical Data:

We use your information for the following purposes:

Treatment and Care:

Communication:

Legal and Regulatory:

Business Operations:

We process your personal data under the following legal bases:

Consent:

Contractual Necessity:

Legal Obligation:

Legitimate Interests:

We may share your information with:

Service Providers:

Professional Bodies:

Legal Requirements:

Medical Professionals:

We ensure all third parties are bound by confidentiality agreements and comply with UK GDPR requirements.

We will never:

We implement appropriate technical and organizational measures to protect your information:

Physical Security:

Technical Security:

Organizational Security:

Data Breach Protocol:

In the event of a data breach that poses a risk to your rights and freedoms, we will:

We retain your information for as long as necessary:

Medical Records:

Financial Records:

Marketing Consent:

Website and Cookies:

Deletion Process:

When retention periods expire, we securely delete or anonymize your data:

You have the following rights regarding your personal data:

Right of Access:

Right to Rectification:

Right to Erasure ("Right to be Forgotten"):

Right to Restrict Processing:

Right to Data Portability:

Right to Object:

Right to Withdraw Consent:

How to Exercise Your Rights:

We will verify your identity before processing requests and respond within 1 month.

Our website uses cookies to improve your experience:

Essential Cookies:

Analytics Cookies:

Marketing Cookies:

Managing Cookies:

Third-Party Services:

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies separately.

We take photographs for the following purposes:

Treatment Record Photography:

Marketing and Educational Use:

Photo Storage and Security:

Your Rights:

Special considerations for individuals under 18:

Consent Requirements:

Parental Rights:

Data Protection:

Marketing:

We primarily store and process data within the United Kingdom.

Cloud Services:

Some of our service providers may store data in:

Safeguards:

When data is transferred internationally, we ensure:

Data Locations:

We do not transfer sensitive medical data outside the UK/EEA without explicit consent and appropriate safeguards.

We do not use automated decision-making or profiling that has legal or significant effects.

Limited Automation:

All treatment decisions and medical assessments are made by qualified practitioners with human oversight.

Your Rights:

We may update this Privacy Policy from time to time to reflect:

Notification of Changes:

Your Acceptance:

Continued use of our services after changes indicates acceptance of the updated policy. If you do not agree with changes, please contact us to discuss your options.

Data Controller:

Touchwood Laser & Skin Clinic

14 Frederick Road

Edgbaston

Birmingham B15 1JD

Contact Us:

Email: [email protected]

Phone: 07387 381121

Website: www.touchwoodlaserclinic.co.uk

Data Protection Queries:

For any questions about how we handle your data, please contact us using the details above.

Making a Complaint:

If you are unhappy with how we have handled your personal data, you have the right to complain to:

Information Commissioner's Office (ICO):

Website: www.ico.org.uk

Phone: 0303 123 1113

Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

We would appreciate the opportunity to resolve your concerns before you approach the ICO, so please contact us first.