Last updated: 31 March 2021
Information we may collect from you
In short: We will collect the personal information that you provide to us.
We may collect and process the following information about you:
information (such as your name, email address, postal address, billing address and telephone number) that you provide by completing forms on the Site, including if you register as a user of the Site, purchase any goods through our shop, upload or submit any material via the Site or request any information.
details of any transactions made by you through the Site; communications you send to us, for example to report a problem or to submit queries, concerns or comments regarding the Site or its content; and information from surveys that we may, from time to time, run on the Site for research purposes, if you choose to respond to, or participate in, them.
You are under no obligation to provide any such information. However, if you should choose to withhold requested information, we may not be able to provide you with certain services.
Information automatically collected from you
In short: Some information – such as your Internet Protocol (IP) Address, and/or browser and device characteristics – is automatically collected when you visit our website.
When you visit the Site, we may, by means of cookies and/or other similar technologies, automatically collect additional information about you – such as the type of internet browser or mobile device you use, any website from which you have come to the Site, your IP address (the unique address which identifies your computer or mobile device on the internet) and/or the operating system of your computer or mobile device.
We may, from time to time, run referral programmes or similar initiatives on this Site and on Social Media, that invite you to provide us with the contact details of someone who is known to you who may find our products or services to be of interest. We will only use those contact details for the purpose of the relevant initiative (and not for general marketing purposes). By providing us with their details, you confirm that you have their permission to do so and must not provide us with the details of anyone from whom you do not have such permission. We reserve the right to identify you as the person who has made the referral in the message that is sent to them.
We may disclose aggregate statistics about visitors to the Site, customers and sales in order to describe our services to prospective partners, advertisers, sponsors and other reputable third parties and for other lawful purposes, but these statistics will include no personally identifiable information.
We may disclose your personal information to any of our affiliates, or to our agents or contractors who assist us in providing the services we offer through the Site, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analysing data, providing IT and other support services or in other tasks, from time to time. Our agents and contractors will only use your information to the extent necessary to perform their functions.
In the event that we undergo re-organisation or are sold to a third party, you agree that any personal information we hold about you may be transferred to that re-organised entity or third party.
We may disclose your personal information if required to do so by law or if we believe that such action is necessary to prevent fraud or cyber crime or to protect the Site or the rights, property or personal safety of any person.
The Site may, from time to time, contain links to external sites. We are not responsible for the privacy policies or the content of such sites.
We place great importance on the security of all personal information associated with our users. We have security measures in place to attempt to protect against the loss, misuse and alteration of personal information under our control. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal information. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use all reasonable efforts to prevent it.
You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via the Site whilst it is in transit over the internet and any such submission is at your own risk.
It is advisable to close your browser when you have finished your user session to help ensure others do not access your personal information if you use a shared computer or a computer in a public place.
Storage of your information
Your personal information which we collect is stored on secure servers located in the United Kingdom. Such storage is necessary in order to process the information. Personal information submitted may be transferred by us to our other offices and/or to the third parties mentioned in the circumstances described above (see Information sharing), which may be situated outside the European Economic Area (EEA) and may be processed by staff operating outside the EEA. The countries concerned may not have similar data protection laws to the EEA. Where we transfer your personal information, we will take all reasonable steps to ensure that your privacy rights continue to be protected. By using the Site, you agree to this storing, processing and/or transfer.
We will only keep your personal information for as long as is necessary to fulfil the processes outlined in this privacy notice. We will not keep your personal information for longer than 2 years, unless required by law.
Under the Data Protection Act 1998 and the recent updates to data protection through GDPR, you have a legal right to a copy of all the personal information about you held by us.
On request, we will provide you with a copy of this information. You also have a right to correct any errors in that information. As mentioned above, you have a right to prevent the use of your personal information for direct marketing purposes. You can also choose which cookies you allow whilst browsing and using our website.
Most importantly, you have the right to erasure, also known as the ‘right to be forgotten’. You can ask for your personal information to be deleted from our data systems. Find our contact details below if you would like your data to be deleted.
Cardiff Cosmetic Clinic
The City Surgery
187 City Road
Or send us an email to firstname.lastname@example.org.
We will respond within 30 days.