Privacy Policy
1. Introduction
This Privacy Policy explains how Dr Peter Thomas (“we”, “us”, “our”) collects, uses, and protects your personal data when you use this website or contact us.
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Dr Peter Thomas is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy or how your data is handled, you can contact us via the website or directly through the clinic.
3. What Information We Collect
We may collect and process the following types of personal data:
Information you provide:
- Name
- Contact details (phone number, email address)
- Information submitted via enquiry or consultation forms
- Any details you provide about your hair loss or medical concerns
Automatically collected data:
- IP address
- Browser type and device information
- Pages visited and time spent on the website
- Cookies and tracking data
4. How We Use Your Information
We use your personal data to:
- Respond to enquiries and provide information about services
- Arrange consultations
- Provide medical advice where appropriate (following direct contact)
- Improve our website and services
- Monitor website performance and user behaviour
- Comply with legal and regulatory obligations
5. Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent – when you submit an enquiry or agree to cookies
- Legitimate interests – to respond to enquiries and improve services
- Legal obligation – where required by law or regulation
- Provision of healthcare services – where applicable following consultation
6. Sharing Your Information
We do not sell or rent your personal data.
We may share your data with:
- IT and website service providers
- Appointment booking or communication platforms
- Professional advisers (e.g. legal or regulatory)
- Regulatory bodies where required
All third parties are required to respect the security of your personal data.
7. Data Storage and Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Data Retention
We will only retain your personal data for as long as necessary to:
- Respond to your enquiry
- Provide services
- Meet legal, regulatory, or professional obligations
Medical records (if applicable) may be retained in accordance with healthcare regulations.
9. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data (where applicable)
- Restrict or object to processing
- Request transfer of your data
- Withdraw consent at any time
To exercise these rights, please contact us directly.
10. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those websites.
11. Changes To This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page.
12. Contact
If you have any questions about this Privacy Policy or your data, please contact us via the website or clinic.