Privacy Policy
Privacy Notice of Monte Clinic – Laser Skin Clinic
This is the privacy notice of Monte Clinic – Laser Skin Clinic (‘we’, ‘our’, or ‘us’).
Our address is 11 Bear Street, Leicester Square, London, WC2H 7AS.
If you have any concerns about this notice or your privacy, please contact us.
Introduction
This notice describes how we collect, store, transfer and use personal data. It tells you about your privacy rights and how the law protects you.
In the context of the law and this notice, ‘personal data’ is information that clearly identifies you as an individual or which could be used to identify you if combined with other information. Acting in any way on personal data is referred to as ‘processing’.
Except as set out below, we do not share, sell, or disclose to a third party any information collected through our website.
Personal data we process
1. How we obtain personal data
The information we process about you includes information:
-
you have directly provided to us
-
we obtain as a result of monitoring how you use our website or our services
2. Types of personal data we collect directly
When you use our website or our services, for example, when you book an appointment through our website, we ask you to provide personal data. This can include:
-
personal identifiers, such as your first and last names
-
contact information, such as your email address and your telephone number
-
medical information, such as whether you have suffered any adverse reactions to previous treatments
-
records of communication between us including messages sent through our website, email messages, and telephone conversations
3. Types of personal data we collect from your use of our services
By using our website and our services, we process:
-
technical information about the hardware and software you use to access our website and services (e.g., IP address, browser type, operating system)
-
usage information, including how often you use our services, which pages you visit, whether you receive and respond to our messages
-
transaction information related to your appointment bookings and payments
-
your marketing preferences and communication choices
4. Our use of aggregated information
We may aggregate anonymous information (statistical or demographic data) for any purpose. While such data does not identify you personally, if combined with personal data, it will be treated as such.
5. Special personal data
We may collect special personal data about you (e.g., health data) if we have a lawful basis for doing so. For instance, some treatments require information about your health.
6. If you do not provide personal data we need
If you don’t provide required personal data, we may not be able to deliver our services or enter into a contract with you. We’ll inform you if this is the case.
The bases on which we process information about you
We must process your data under a lawful basis. These include:
7. Contractual obligation
When you book an appointment or agree to our terms, a contract is formed. We process your data as necessary to fulfill our contractual obligations.
8. Consent
We process data when you give your consent, e.g., agreeing to cookies or marketing emails. You may withdraw consent at any time. However, this may affect your ability to use our services.
9. Legitimate interests
We may process your data if we have a legitimate interest, including:
-
improving services
-
business administration
-
responding to inquiries
-
exercising legal rights
-
managing business risks
-
protecting your interests
10. Legal obligation
We may be legally required to process your data, e.g., to comply with a court order or investigation.
How and when we process your personal data
11. Consultations
Consultations help determine if treatments are suitable. We collect medical data in this context and store it securely and only for as long as necessary.
12. Booking an appointment
When you book with us directly (in person or by phone), we collect your data directly. When you book online, this is done via FRESHA, which provides us with the necessary information. See: Fresha Privacy
13. Payment information
We do not collect or store payment data. Payments are processed securely through third-party providers such as Stripe.
14. Photographs at the beginning and end of treatment
We take before-and-after photos for insurance purposes. These are processed under contractual obligation and pseudonymised for added security.
15. Service providers and business partners
We may share your data with third parties like payment processors or fraud prevention agencies when necessary.
Use of information we collect through automated systems
16. Cookies
Cookies are used for functionality, analytics, and personalisation. You must provide explicit consent for non-essential cookies. This site is hosted by Wix, which also uses cookies. See: Wix Cookie Info
17. Personal identifiers from your browsing activity
We may collect data such as your IP address, location, and device/browser info. This helps us understand how users interact with our site.
Other matters
18. Your rights
You have rights over your personal data. Learn more at: Know Your Privacy Rights
19. Data may be processed outside the UK
Your data may be processed or stored in other countries (e.g., US or EU) via Wix. Wix ensures compliance through secure, industry-standard practices.
20. Control over your own information
Keep your personal data up to date. You can request access to the data we hold about you. We may need to verify your identity and may charge a fee if the request incurs costs.
21. Communicating with us
When you contact us, we retain your messages and may associate them with your account to provide better service.
22. Complaining
If you’re unhappy with how we handle your data, please contact us first. You may also file a complaint with the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint/.
23. Retention period
We retain personal data only for as long as necessary to:
-
deliver services
-
comply with laws
-
defend legal claims
24. Compliance with the law
Our privacy policy complies with UK law, including the Data Protection Act 2018, GDPR, and PECR.
25. Review of this privacy policy
We may update this notice as necessary.