2. Data Controller

Joy Lane Clinic is the data controller responsible for your personal data.

3. Information We Collect

We collect personal data in the following ways:

Information you provide directly:

• Contact information (name, address, E-mail address, phone number) when you book an appointment, make an enquiry, or subscribe to our newsletter.
• Medical history and health information when you receive treatment at our clinic.
• Payment information when you pay for our services.
• Any information you provide when you communicate with us.

Information collected automatically: Technical information, including your IP address, browser type, and operating system, when you visit our website. Information about your usage of our website, such as pages visited and time spent on our site, through cookies and similar technologies.

Information from third parties: Referrals from other healthcare professionals (with your consent).

4. How We Use Your Information

We use your personal data for the following purposes:

• To provide and manage our healthcare services.
• To schedule and manage appointments.
• To communicate with you about your appointments and treatments.
• To process payments.
• To maintain accurate medical records.
• To improve our services and website.
• To comply with legal and regulatory obligations.
• To send marketing E-mails, if you have opted in to receiving them.

5. Legal Basis for Processing

We process your personal data based on the following legal bases:

Contractual necessity: Processing is necessary for the performance of a contract with you (e.g., providing healthcare services).

Legal obligation: Processing is necessary to comply with legal obligations (e.g., maintaining medical records).

Consent: We rely on your consent for certain processing activities, such as sending marketing E-mails. You can withdraw your consent at any time.

Legitimate interests: Processing is necessary for our legitimate interests, provided that your rights and freedoms do not override those interests (e.g., improving our services).

6. Sharing Your Information

We may share your personal data with:

• Healthcare professionals involved in your care.
• Payment processors.
• IT service providers.
• Legal and regulatory authorities when required by law.
• Any third party we are required to share data with to comply with the law.
• We will not sell or rent your personal data to third parties.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purpose of satisfying any legal, accounting, or reporting requirements. Medical records are retained in accordance with legal and professional guidelines.

9. Your Rights

Under UK GDPR, you have the following rights:

• Right to access: You can request access to your personal data.
• Right to rectification: You can request that we correct inaccurate or incomplete data.
• Right to erasure: You can request that we delete your personal data (in certain circumstances).
• Right to restrict processing: You can request that we restrict the processing of your personal data.
• Right to data portability: You can request to receive your personal data in a portable format.
• Right to object: You can object to the processing of your personal data.
• Right to withdraw consent: You can withdraw your consent at any time.
• Right to complain: You have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

10. Cookies

Our website uses cookies to enhance your browsing experience. Please refer to our Cookie Policy for more information.

Cookie Policy: We use cookies and similar technologies to collect information about your browsing activities on our website. Cookies are small text files that are placed on your device when you visit our website.

Types of cookies we use:

Essential cookies: Necessary for the operation of our website.

Analytical/performance cookies: Allow us to recognise and count the number of visitors and to see how visitors move around our website.

Functional cookies: These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences.

Managing cookies: You can manage your cookie preferences through your browser settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: