Privacy Policy For HenleySkin

 
At HenleySkin we recognise the importance of protecting your privacy in line with our legal responsibilities. This policy advises you on how we use any personal data or information you share with us, either via our website or other means of communication. This notice also covers use of your personal data or information when you become the recipient of services purchased through HenleySkin. Your continued use of this site signifies your assent to this Privacy Policy.

 

WHO ARE WE

HenleySkin (Orchard Aesthetics Ltd) is a company registered in England and Wales. Company Registration Number 07459219.

Further details of HenleySkin can be found here: www.henleyskin.co.uk

COLLECTION OF PERSONAL DATA

We collect personal data or information when you enter your details on forms on our website and when you contact us (in writing, by post, email, or posts and messages via the social media platforms that we support, or by telephone or SMS). We also collect personal information when you use our services. This data processing is permitted by law under GDPR Article 6(1)(b) “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.

WHEN YOU CONTACT US

When you contact us via this website, by completing a ‘contact us’ form, we may need to use your personal details to deal with your query or product enquiry. The details may include your name, address, landline telephone/mobile number, and/or email and IP address.

DURATION OF DATA STORAGE

We keep personal information either: 1. to send you the information you have requested from our company, or 2. to comply with contractual requirements we have in place with our clients. Unless your enquiry results in the purchase of a service or product, or you have selected to receive news and promotional marketing which may be of interest to you, your personal details will be deleted from our systems 24 months after the conclusion of your enquiry.

PURCHASE OF SERVICES

When you purchase a service from HenleySkin, we will use the data supplied to fulfil your order. By law we must keep your data for a minimum of 10 years when you engage our services.

We will hold your details securely for the duration of the agreement.

Your personal details will be not deleted from our systems after the conclusion of the service or product purchased. Because we hold medical data we are currently obligated to hold this information securely for a period of 10 years. We can hold the information either on our electronic databases or have the information securely stored under lock and key in our clinic filing systems.

WHY WE COLLECT PERSONAL DATA

We collect personal information to:

  • Assess you as to whether or not you may be suitable and appropriate for treatment. We may offer specific treatment(s) suitable for your medical condition
  • We shall manage any aspect of our medical service and fulfil our obligations to you
  • Improve operation of our clinic and those within it, whether employees, contractors or external organisations
  • For management and auditing our medical and business operating
  • For market research and analysis and statistical analysis
  • We can provide you with products and services that you may request from HenleySkin.
  • check your identity to protect security and prevent fraud, when you use our services
  • Improve and develop our services
  • Meet our legal and medical obligations
  • Meet a contractual obligation to our clients

 

STORAGE OF BANK AND PAYMENT CARD DETAILS

We do not hold any bank payment card details online

PROCESSING OF DATA

We only process data in line with Article 6(1)(b) of the General Data Protection Regulations where “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” However, we also process your sensitive data, and you should provide consent for the safe storage of this information. We need this data to allow us to assess clinical suitability for medical aesthetic interventions

SHARING OF PERSONAL DATA

Personal data is only used by HenleySkin for the purpose(s) detailed above.

We share your personal information with select third party business partners where it is necessary to do so, for the purpose of providing the product or service you have enquired about, or purchased through HenleySkin.

We will share your personal information with authorities, (including the police, law enforcement agencies, credit reference and fraud prevention agencies and select other bodies), for:

  • prevention and detection of crime
  • the prevention of fraud against HenleySkin, third parties or customers
  • to prevent money laundering
  • for identity verification
  • for the purpose of legal proceedings

We do not sell your personal information to any other third party, for any reason whatsoever.

In cases where your personal information has been passed to a third party as part of provision of a product or service purchased, you may need to contact the third party directly in relation to their continued use of your personal information.

CALL RECORDING

HenleySkin does not to record any calls. We use a telephone answering service. They may record telephone conversations which are kept on their secure server for a maximum of 3 months. Call recordings are stored on a secure server.

KEEPING PERSONAL DATA SECURE

HenleySkin are committed to keeping your personal information secure. All personal information is stored on a secure server or locked filing cabinets to protect it from being accessed or used inappropriately.

KEEPING PERSONAL DATA ACCURATE

HenleySkin will endeavour to ensure that your personal information is kept as accurate and up to date as far as is reasonably possible.

Where you have opted-in to receive news, periodic offers, or promotional email marketing, we will use only relevant personal information to contact you.

ACCESSING PERSONAL DATA

You can access your personal information at any time by contacting HenleySkin.

NEWS, OFFERS AND PROMOTIONAL EMAIL MARKETING

Where you have selected to receive news, periodic offers, or promotional email marketing, we will use only relevant personal information to contact you.

We may communicate with you by email, post, phone, SMS text message and social media posts and messaging where you have provided consent at the time we collect your personal information.

UPDATING YOUR PREFERENCES

You can change your personal information and marketing preferences at any time by contacting us. However our use of your personal information will not be affected by the opt-ins or opt-outs you select, if you have provided information to us or through other means.

If you do not wish to receive information by email from HenleySkin please use the unsubscribe feature on any promotional email received, email us quoting, ‘please unsubscribe me’ in the subject line, or use our ‘contact us’ form to request that your details are removed from our database. In this case, we will only retain your personal information, where our legal or regulatory obligations require us to do so.

REQUESTING A COPY OF PERSONAL DATA

You can contact us via email at hydrafacial@henleyskin.co.uk to ask us what personal data we hold on you.

If you wish to request details of personal information held on systems and in hard copy, then please contact us directly.

SOURCES OF PERSONAL DATA

HenleySkin collect your personal information:

  • directly from you when you complete a form on our website, register with us and/or select the option to receive news, information and promotional marketing from us
  • from third parties who use our products and services including information recorded on mail or parcels sent to you by a third party
  • from third parties when we undertake a payment authorisation or when undertaking an identity check
  • when you purchase a product or service which we provide together with a third party business and the information is collected by the third party business
  • when parcels or post are handled through Royal Mail or third party networks.

DATA CONTROLLER

The data controller is HenleySkin Director.

LINKS TO THIRD PARTY WEBSITES

Our website, emails and social media pages may contain links to websites operated by third parties. HenleySkin are not responsible for privacy notices, policies, services offered, or other site content displayed on third party websites.

CHANGES TO OUR PRIVACY NOTICE AND POLICY

We review our privacy notice and policy regularly and will display the current version on this webpage. Last updated Jan 2022.