Privacy Policy

1. Data Controller
The data controller responsible for your personal data is: Hair Transplants of The Royal Liver Building The Royal Liver Building, Pier Head, Liverpool, Merseyside, L3 1HU hello@aestheticsoftheroyalliverbuilding.co.uk

2. Information We Collect
We may collect and process the following personal data:

• Personal identification details (name, address, date of birth, contact information)
• Medical history and health information relevant to consultation and treatment
• Clinical consultation notes and treatment records
• Photographs taken for clinical purposes (where applicable and with consent)
• Appointment history and correspondence
• Payment and billing information
• Website usage data, including cookies and analytics

Medical data is treated as special category data under UK GDPR and is handled with enhanced safeguards.

3. How We Use Your Information
We use your personal data to:

• Provide consultations and cosmetic surgical treatments
• Assess suitability for procedures
• Maintain accurate clinical records
• Communicate regarding appointments, treatment, and aftercare
• Process payments and manage accounts
• Improve our services and operational processes
• Meet legal and regulatory obligations

4. Lawful Basis for Processing
We process personal data under the following lawful bases:

• Consent
• Contract
• Legal obligation
• Legitimate interests

For medical data, we rely on additional lawful conditions relating to the provision of healthcare under UK GDPR.

5. Confidentiality and Clinical Governance
All patient information is treated as strictly confidential. Access to your data is restricted to authorised healthcare professionals and staff involved in your care. We follow clinical governance procedures to ensure data is handled securely and appropriately in line with professional standards.

6. Sharing Your Information
We may share your data with:

• Healthcare professionals involved in your care
• Administrative and clinical staff
• IT systems and service providers supporting our operations
• Payment processors
• Regulatory bodies where required by law
• Legal or professional advisors where necessary We do not sell or rent personal data.

7. Data Security
We use appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.

8. Data Retention
Medical records are retained in line with legal, regulatory, and professional guidance. Data is stored securely and only kept for as long as necessary.

9. Your Rights
You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (where applicable)
• Restrict or object to processing
• Withdraw consent (where applicable)
• Request data portability

10. Complaints
If you have concerns about how your data is handled, please contact us. You also have the right to complain to the Information Commissioner’s Office (ICO): https://ico.org.uk

11. Cookies
Our website uses cookies to improve functionality and analyse website usage. You can control cookies through your browser settings.

12. Updates
This policy may be updated periodically. Please review it regularly.

13. Contact Us
For any questions regarding this policy or your data, please contact us using the details on our website.