About this policy
This policy explains what personal information Lipo Freeze collects, why, how it is used and kept, and what rights you have over it under the UK General Data Protection Regulation and the Data Protection Act 2018. It is written in plain English, because a privacy policy that cannot be understood is of no use to anyone.
Last updated: [LAST UPDATED DATE — PLACEHOLDER]
The bracketed entries below are placeholders. They must be replaced with the operator's registered details before this policy is relied upon.
Who is responsible for your information
The data controller responsible for the personal information described here is [DATA CONTROLLER LEGAL NAME — PLACEHOLDER], trading as Lipo Freeze, of [REGISTERED ADDRESS — PLACEHOLDER]. The controller is registered with the Information Commissioner's Office under registration number [ICO REGISTRATION NUMBER — PLACEHOLDER].
Questions about this policy, or about how your information is handled, can be raised with [PRIVACY CONTACT EMAIL — PLACEHOLDER].
What information is collected
Information you give during an enquiry
When you telephone Lipo Freeze, you will usually give your name, a contact telephone number, the area of the country you live in, and a description of the concern you are enquiring about. You give this voluntarily and may decline any part of it, although some questions cannot be answered without it.
Health information relevant to suitability
Because these are treatments applied to the body, suitability cannot be judged without some health information. This may include your general medical history, past surgery, current medication, skin or circulation conditions, whether you are pregnant or breastfeeding, and whether you have any implanted device such as a pacemaker or coil. Health information is special category data under UK GDPR and is treated with the additional care that status requires.
Appointment records
If an appointment goes ahead, a record is kept of what was discussed and agreed, the address at which treatment was carried out, the treatment given, and anything relevant observed or reported afterwards. These records exist so that care is consistent and safe, and so that a practitioner seeing you again has an accurate history rather than a memory.
What this website collects
This website has no contact form, no login and no account area, so it does not collect information you type into it. Like most websites, the server delivering these pages may record ordinary technical information such as the request made, the time and the general type of browser or device used. Any cookies or analytics in use are described below.
Why the information is used, and the lawful basis
Personal information is used to answer your enquiry, to assess whether a treatment is suitable, to arrange and deliver appointments, to keep accurate records of care, and to meet legal obligations that apply to the business.
- Consent. Where you have chosen to provide your details in order to receive information or be contacted about your enquiry. You may withdraw consent at any time, and withdrawal does not affect anything already done on the basis of it.
- Explicit consent. Health information is processed only with your explicit consent, given knowingly for the specific purpose of assessing suitability and delivering treatment safely.
- Contract. Where information is needed to arrange and carry out a treatment you have asked for.
- Legitimate interests. For the ordinary running, security and record-keeping of the business, where those interests are not overridden by your rights.
- Legal obligation. Where information must be kept or disclosed to comply with the law.
Your information is not sold, and it is not used to build profiles for advertising.
Who your information is shared with
Information is shared only with those who need it. In practice this means two groups.
- Practitioners delivering your treatment. The practitioner attending your home needs to know who you are, where you are, what has been agreed and the health information relevant to carrying the treatment out safely.
- Service providers acting on instructions. Businesses that provide the systems and support the service runs on — for example telephony, appointment scheduling, secure record storage or professional advisers. They act only on documented instructions and are not permitted to use your information for their own purposes.
Information may also be disclosed where the law requires it, or where there is a serious risk to someone's safety. Beyond that, it is not passed to anyone else.
How long information is kept
Information is kept only for as long as there is a reason to hold it. Enquiries that do not lead to an appointment are held for a limited period and then deleted. Treatment records are kept longer, because health records must be retained for a period appropriate to the care provided and to any professional, insurance or legal requirement. When a retention period ends, information is securely deleted or anonymised.
How information is kept secure
Reasonable technical and organisational measures protect personal information against loss, misuse and unauthorised access. These include limiting access to those who need it, access controls on the systems holding records, and securing paper records where any exist. No system can be guaranteed completely secure, and any claim otherwise would be untrue.
Your rights
Under UK data protection law you have the following rights over your personal information. Exercising any of them is free, and you will not be treated differently for doing so.
- Access. To be told whether your information is held, and to receive a copy of it.
- Rectification. To have inaccurate information corrected and incomplete information completed.
- Erasure. To have information deleted where there is no longer a lawful reason to keep it. This right is limited where records must be retained for health or legal reasons.
- Restriction. To ask that use of your information is paused while an accuracy or objection question is resolved.
- Objection. To object to processing carried out on the basis of legitimate interests.
- Portability. To receive information you provided in a commonly used electronic format, or to have it sent to another organisation where technically possible.
- Withdrawing consent. To withdraw consent, including explicit consent to the use of health information, at any time. Withdrawing consent to health information may mean treatment can no longer be provided safely.
Requests should be made to [PRIVACY CONTACT EMAIL — PLACEHOLDER] and are answered within one month, or sooner where possible. You may be asked to confirm your identity so that information is not disclosed to the wrong person.
Complaints
If you are unhappy with how your information has been handled, please raise it first with [DATA CONTROLLER LEGAL NAME — PLACEHOLDER] so that it can be looked into. You also have the right to complain directly to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk. Complaining to the ICO does not require you to raise the matter here first.
Cookies and analytics
This section is a placeholder and is written honestly as one. Any cookies set by this website, and any analytics used on it, will be listed here with their purpose, provider and duration. Until that list is completed, no claim is made about which cookies are or are not in use. Cookies that are not strictly necessary will be set only with your consent.
Children
Treatments are intended for adults, and this website is not directed at children. Information about anyone under 18 is not knowingly collected. If you believe information about a child has been provided in error, please contact [PRIVACY CONTACT EMAIL — PLACEHOLDER] and it will be deleted.
Changes to this policy
This policy may be updated as the service, the systems behind it or the law change. The current version is always the one published on this page, and the date it was last revised is shown at the top. Where a change materially affects how your information is used, reasonable steps will be taken to bring it to your attention.