The MediShed By Dr Dil | Skincare Clinic In Balham London
The Medi-Shed Privacy and Cookie Policy
Welcome to the Privacy Policy for The Medi-Shed by Dr Dil ("we", "us", or "our"). We operate as an aesthetic and medical clinic. We respect your privacy and are fully committed to protecting your personal and medical data. This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website, use our online booking tools, or undergo clinical consultations and treatments with us. It also outlines your legal privacy rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. IMPORTANT INFORMATION AND WHO WE ARE
The Medi-Shed by Dr Dil is the data controller responsible for your personal data.
If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the details set out below:
• Full Name of Legal Entity: The Medi-Shed by Dr Dil
• Email Address: contact@drdil.co.uk
• Postal Address: 81, Nightingale Lane, Balham, London, SW12 8NX
• Supervisory Authority: Information Commissioner’s Office (ICO) UK
2. THE DATA WE COLLECT ABOUT YOU
Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:
• Identity Data: First name, last name, date of birth, title, and biological sex.
• Contact Data: Email address, billing address, home address, and telephone numbers.
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform via cookies.
• Marketing and Communications Data: Your preferences in receiving marketing updates from us and your communication preferences.
• Special Category (Medical & Health) Data: Because we provide clinical and aesthetic treatments, we must collect sensitive health data. This includes your relevant medical history, allergies, current medications (such as active retinoids or blood thinners), skin conditions, contraindications (such as aspirin allergies for specific chemical peels), and before-and-after clinical photography.
3. HOW WE COLLECT YOUR DATA
We use different methods to collect data from and about you, including through:
• Direct Interactions: You give us your Identity, Contact, and Medical Data by
filling out forms on our website, booking an appointment online, subscribing to our
newsletter, or completing a digital consultation form before a procedure.
• Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns via cookies.
• In-Clinic Assessments: Data captured physically or digitally during your face-to-face clinical appointments at The Medi-Shed by Dr Dil.
4. HOW WE USE YOUR PERSONAL DATA AND OUR LAWFUL BASIS
We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal grounds:
1. Performance of a Contract: To register you as a patient, schedule appointments, and deliver clinical or aesthetic treatments. 2. Legitimate Interests: For internal clinic management, reviewing treatment efficacy, and updating our website performance. 3. Explicit Consent (Special Category Data): We rely on your explicit, signed consent to process your sensitive medical history and to capture/store before-and-after clinical photography. 4. Legal Obligation: To comply with medical indemnity insurance conditions or statutory obligations regarding medical records.
5. DISCLOSURES OF YOUR PERSONAL DATA
We do not sell your personal data. However, we may share your personal data with trusted third parties to run our clinic safely:
• Clinical and Booking Software Providers: Third-party digital platforms (such as Consentz, Timely, Phorest, Fresha, or Glowday) used to manage schedules, clinical records, consultation forms, and processing payments.
• Prescription Pharmacies: Regulated aesthetic pharmacies (e.g., Church Pharmacy) if a prescription-only medicine (such as Botox) must be ordered specifically for your treatment.
• Professional Advisors: Our insurers, legal advisors, or medical regulatory bodies if required.
6. DATA SECURITY
We have put in place appropriate security measures to prevent your personal and medical data from being accidentally lost, used, altered, disclosed, or accessed in an unauthorised way.
• All digital patient charts and medical notes are stored on secure, encrypted, password-protected clinical databases.
• Access to your personal data is strictly limited to authorized clinic staff who have a business or clinical need to know.
7. DATA RETENTION
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for. By law and under clinical indemnity insurance rules, medical and aesthetic patient records must be securely retained for a minimum period (typically 7 to 10 years) following your last treatment. After this legal retention window expires, your digital and physical data will be permanently and securely destroyed.
8. YOUR LEGAL RIGHTS
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
• Request access to your personal data (commonly known as a "Data Subject Access Request").
• Request correction of any incomplete or inaccurate data we hold about you.
• Request erasure of your personal data (subject to clinical and insurance retention laws which may override this right for medical notes).
• Withdraw consent at any time where we are relying on consent to process your data (such as withdrawing consent for marketing or public use of before-and-after photos).
To exercise any of these rights, please contact us directly at [Insert Clinic Email Address].
9. THIRD-PARTY LINKS AND COOKIES
Our website may include links to third-party websites or integrated booking portals. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. You can set your browser to refuse all or some browser cookies using our cookie compliance banner when you first land on our website.