It is LPA’s policy to respect your privacy regarding any information we may collect while operating our website. Accordingly, we have developed this privacy policy in order for you to understand how we collect, use, communicate, disclose and otherwise make use of personal information. We have outlined our privacy policy below.
- Collection & Purpose: We collect personal data to provide aesthetic and skin services, with the lawful basis being the fulfillment of a contract and legitimate interests. Personal information is gathered for the purpose of offering personalized consultations and services, and to maintain accurate health records. This includes data collected through consultations, service bookings, and any personal or health information shared during appointments.
- Lawful Basis for Processing: LPA processes personal data based on lawful reasons, including consent, legitimate interests, and in some cases, compliance with legal obligations. Specifically, for health-related consultations, it is necessary to retain records for medical purposes as required under medico-legal regulations.
- Retention Period: Personal data is retained as long as necessary to comply with legal and medical guidelines. For consultations, records will be securely stored for a minimum of 10 years as per medical regulations. Contact details used for marketing purposes will be removed if requested or when no longer relevant.
- Client Rights: Clients have the right to request access to their data, rectification, or erasure under applicable law, except where data must be retained for legal or medical reasons. We ensure transparent communication regarding the use and retention of personal data.
- Security Measures: LPA ensures that all personal data is securely stored and protected against unauthorized access, modification, or disclosure. We use secure systems and regularly review our security protocols to maintain high standards of data protection.
- Marketing & Communication: Clients may opt-out of marketing communications at any time, and their contact details will be removed from our mailing lists upon request.
- Third-Party Data Processing: We utilize third-party services (e.g., CallRail for call tracking) to improve user experience and service effectiveness. These third parties are also committed to upholding data protection standards and comply with GDPR regulations.
LPA is committed to protecting your privacy and maintaining the confidentiality of your personal information. For any further inquiries or to exercise your data protection rights, please contact us at hello@lpa.london