Privacy Policy

1. Who We Are

Harmony Clinic Online is a professional skincare online shop offering in-person and online skincare consultations and treatments.

Business Name: Harmony Clinic Online
Address: 24 Mayfield Close, Kempston, Bedford, MK42 8UP
Email: jo@theharmonyclinic.co.uk
Phone: 07716 331255
ICO Registration Number: 00016135725

2. What Information We Collect

When you use our website or services, we may collect the following types of personal data:

a. Personal Identifiable Information:

• Name
• Date of birth
• Email address
• Phone number
• Postal address
• Medical history and current medications (if relevant to your treatment)

• Skin concerns and goal

b. Consultation Data:

• Photographs of your skin or face (submitted voluntarily for consultation purposes)
• Notes from consultations and follow-up sessions

c. Technical Data:

• IP address
• Browser type and version
• Device type

• Website usage and navigation data through cookies (see section 7)

3. How We Use Your Information

We collect and process your personal information to:

• Provide tailored skincare advice and recommendations
• Carry out skin assessments via photos and consultation forms
• Keep medical records in line with healthcare compliance
• Communicate with you regarding your treatment or product recommendations
• Improve our website and services
• Comply with our legal and regulatory obligations

4. Lawful Basis for Processing

We process your personal data under the following legal bases:

• Consent – You give us clear permission to process your information (e.g. sending photographs or completing consultation forms).
• Contractual Obligation – To fulfil our service to you.
• Legal Obligation – To comply with professional regulations and healthcare standards.
• Legitimate Interests – For the safe and secure running of our business and improving services.

5. How We Store and Protect Your Data

We take data security seriously and use appropriate technical and organisational measures to protect your information.

• Consultation records are stored in secure, encrypted systems.
• Only authorised personnel have access to sensitive client data.

• We regularly update and audit our systems to protect against breaches.

Your data is retained only as long as necessary to provide our services and meet regulatory requirements (typically 7 years for healthcare-related records)

6. Sharing Your Data

We will never sell or share your data for marketing purposes.

We may share your information with:

• Clinically relevant team members within The Harmony Clinic
• Professional healthcare software systems (secure and GDPR-compliant)

• Regulatory bodies, if legally required to do so

All third-party providers are carefully vetted and must comply with UK data protection laws.

7. Cookies & Website Analytics

We use cookies to enhance user experience and collect anonymous website usage data. You can adjust your browser settings to refuse some or all cookies.

For more detailed information, please refer to our Cookie Policy (available on request or on our website).

8. Your Data Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to medical/legal obligations)
• Object to or restrict processing
• Withdraw your consent at any time
• File a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at jo@theharmonyclinic.co.uk.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal, technical, or business developments. The latest version will always be available on our website.

10. Contact Us

If you have any questions about this policy or how your data is handled, please get in touch:

Harmony Clinic Online
24 Mayfield Close
Kempston
Bedford
MK42 8UP

Email: jo@theharmonyclinic.co.uk

Phone: 07716 331255
ICO Registration Number: 00016135725