Privacy Policy

Effective Date: [Insert Date]
Last Updated: [Insert Date]

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. We are committed to respecting your privacy and ensuring your personal data is handled safely and responsibly.

Who We Are

We are a CQC-registered UK weight loss clinic offering remote consultations and the sale of weight loss pens through our online shop.

Clinic Name: [Insert Clinic Name]
Company Number: [Insert Company Number if applicable]
CQC Registration Number: [Insert Number]
Registered Address: [Insert Address]
Contact Email: [Insert Email Address]

1. What Information We Collect

We collect and process the following types of personal data:

a) Personal Identification Information

• Full name

• Date of birth

• Gender

• Contact details (email, phone, address)

b) Health and Medical Information

• Weight, height, BMI

• Medical history relevant to weight loss treatment

• Current medications

• Lifestyle and dietary habits

• Information shared during online consultations

c) Purchase and Payment Information

• Order history

• Billing and shipping addresses

• Payment method (handled securely via third-party processors – we do not store card details)

d) Website Usage Data

• IP address

• Browser type and version

• Pages visited, time spent on site

• Cookies (see Cookie Policy)

2. How We Use Your Data

We use your data to:

• Provide weight loss consultations and prescribe treatment where appropriate

• Process and deliver orders of weight loss pens

• Fulfill our obligations as a CQC-regulated healthcare provider

• Ensure safe, effective, and legal provision of medical products

• Communicate with you about appointments, prescriptions, and products

• Comply with legal, regulatory, and NHS requirements

• Improve our website, services, and patient experience

3. Legal Basis for Processing

We only process your data when there is a legal basis to do so under UK GDPR:

• Consent – For marketing communications or where required

• Contract – To fulfil our agreement to provide products or services

• Legal Obligation – To meet regulatory requirements as a healthcare provider

• Vital Interests – Where necessary to protect your health

• Legitimate Interests – To operate and improve our business (never overriding your rights)

4. Sharing Your Data

We will never sell your personal data. We may share your data with:

• Qualified medical professionals within our clinic

• Pharmacy partners for prescription fulfilment

• Delivery providers (for shipment of pens)

• Payment providers (e.g., Stripe, PayPal)

• Regulators (e.g., Care Quality Commission, MHRA)

• IT and hosting providers under strict confidentiality

All partners are GDPR-compliant and only access data necessary for their role.

5. Data Retention

We retain medical records and personal information in line with NHS and CQC guidelines – typically for 8 years after last contact (or longer if legally required). After this, your data is securely deleted or anonymised.

6. Your Rights

Under UK data protection law, you have the right to:

• Access a copy of your data

• Correct any inaccurate information

• Request deletion of your data (where lawful)

• Object to or restrict certain types of processing

• Withdraw consent at any time

• File a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, email: [Insert Email]

7. How We Protect Your Data

We implement technical and organisational measures to keep your data safe:

• Encrypted storage of medical and order data

• Secure website (HTTPS) and firewalls

• Access control for staff and partners

• Regular security and privacy reviews

8. Cookies and Tracking

We use cookies to improve website performance and user experience. For details, please see our [Cookie Policy].

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for their content or privacy practices. Please read their privacy policies before submitting any personal data.

10. Updates to This Policy

We may update this policy from time to time. Any changes will be posted on this page with a new effective date.

Contact Us

If you have any questions about this policy or how we handle your data:

📧 Email: [Insert Contact Email]
📞 Phone: [Insert Phone Number]
📍 Address: [Insert Business Address]