Privacy Notice
Who are we? Pinnacle Clinic is the data controller. We are responsible for your personal data (“we”, “us” or “our” in this privacy notice). By providing us with your data, you warrant to us that you are over [16/18] years of age.
This privacy notice provides details of how we collect and process your personal data through your use of our website pinnacleclinic.co.uk, and at our clinic in Keighley, UK.
How we collect & process your information To the extent permissible under applicable law, we collect information about you and any other party whose details you provide to us when you:
- Register to use our websites, booking applications, or services; this may include your name, address, email address, and telephone number. We may also ask you to provide additional information about your medical history and preferences.
- Place an order or book a consultation using our websites or clinic management systems; this may include your contact details and payment information.
- Complete online forms, take part in surveys, enter competitions, or participate in any interactive areas on our website.
- Interact with us using social media.
- Provide your contact details to us when registering or updating your information.
- Contact us offline, for example by telephone, SMS, email, or post.
We will also collect your information where you only partially complete online forms or booking steps, and may use this information to contact you to remind you to complete outstanding information.
We collect information from your devices and applications you use to access our websites (for example, device type, location information, IP address, browsing history, and web log information). We may do this using cookies or similar technologies.
If you intend to give us personal information about someone else, you are responsible for ensuring that you comply with any obligation under applicable data protection laws, including obtaining their explicit consent.
Information which is processed The following categories of personal data about you may be processed:
Marketing data From time to time, we may use your information to contact you with details about our treatments, products, and services which we feel may be of interest to you. We may also share your information with our carefully selected third parties. We may contact you for this purpose by telephone, post, SMS, or email. You have the right at any time to stop us from contacting you for marketing purposes. You can exercise these rights by contacting us or unsubscribing from any email marketing using the links provided.
Communication & correspondence data We use various methods to communicate with you, including email, text messages, social media messaging, website booking forms, and phone. We may monitor and record our communications for training, quality assurance, and legal/regulatory compliance.
Patient (client) & sensitive data We process patient information to safely deliver treatments, maintain our accounts, and promote our services. Your patient data makes up your medical record, which we process to assess your suitability for specific treatments.
If personal or sensitive data required by law or contract is not provided, we may not be able to deliver treatments or services to you.
The types of patient information we use include:
- Personal details (names, addresses, telephone numbers).
- Family/next of kin details.
- Visual images and personal appearance.
- Before/after photography for treatment outcomes.
We also process sensitive classes of information that may include:
- Racial and ethnic origin.
- Medical history.
Your personal and sensitive data will be subject to strict confidentiality requirements.
Data from website & social media platforms We collect data regarding your use of our website and social media to perform analysis and help deliver appropriate advertising and content. This includes your IP address, browser details, navigation paths, and statistics from third-party integrated tools.
Who your information may be shared with We may share your information with the following parties, who are required to treat your data in accordance with the law:
- Partners, IT system administrators, and clinic management software providers (e.g., Pabau) that help us provide booking systems and services.
- Marketing agencies to help advertise our services.
- Third parties used to facilitate payment transactions.
- Regulatory bodies, government agencies, and law enforcement where required by law.
- Professional agencies such as lawyers, auditors, and insurers.
- Your General Practitioner or other healthcare providers (with your consent).
Security and storage of information We keep your information secure by taking appropriate technical and organisational measures against unauthorised processing or accidental loss. We allow access to your personal data only to those employees and partners who have a business need to know.
We will only retain your personal data for as long as necessary. The law requires that medical records are retained for a minimum of 10 years post-treatment.
Other websites & third parties Our website contains links to third-party sites and plugins. We do not control these websites and are not responsible for their privacy statements.
Cookies Cookies are small text files transferred from our website and stored on your device. We use them to provide a personalised service. If you disable cookies, some parts of this website may become inaccessible.
Your legal rights The information we hold must be accurate and up to date. If you have any queries about how we treat your information, how to update your records, or how to obtain a copy of your data, please contact us. We aim to respond to any requests within one month.
Further details on your rights: https://ico.org.uk/
Contact Details:
- Name: Pinnacle Clinic
- Contact Person: Datacontroler@pinnacleclinic.co.uk
- Email: info@pinnacleclinic.co.uk
- Postal: Ground Floor, Unit 5, Crown Works, Bradford Rd, Sandbeds, Riddlesden, Keighley BD20 5LN
- Tel: 03330 915 833