Privacy notice.

Who we are

Dr Pam Rhead, trading as Dr Rhead Aesthetics, is the data controller for personal information processed through this website and the clinic. The clinic is based at Inn Road, Dollingstown, Craigavon, BT66 7JN.

For any data protection question, write to us at drrheadaesthetics@gmail.com.

What information we collect

When you use this website or contact us, we may collect:

• Enquiry form data. Your name, email address, optional phone number, the message you send, and the treatment context (if you submit from a treatment page).
• Analytics data (with your consent). Anonymised information about how you use the site (pages viewed, links clicked, device type, approximate location from IP). See the cookies section below.
• Clinical information (patients only). Medical history, contraindications, treatment records, photographs (where consented), aftercare correspondence. Held in our clinical record-keeping system, separate from this website.

We do not collect special category data (health, racial origin, sexual orientation, biometrics) through this website. Clinical information is collected directly from you during consultation and treatment.

Why we use it, and our lawful basis

• To respond to your enquiry. Necessary for steps prior to entering a contract (UK GDPR Article 6(1)(b)), and legitimate interests in running the clinic (Article 6(1)(f)).
• To provide treatment, if you become a patient. Contract (Article 6(1)(b)) and, for clinical health data, the provision of health treatment under Article 9(2)(h).
• To analyse and improve the website. Your consent (Article 6(1)(a)). You can withdraw consent at any time using the "Cookie preferences" link in the footer.
• To meet legal and regulatory obligations. Legal obligation (Article 6(1)(c)). Includes record-keeping under the GMC's Good Medical Practice and HMRC tax retention rules.

Who we share it with

We use a small number of trusted service providers, each contractually bound to protect your data:

• Resend (resend.com). Delivers enquiry-form emails to the clinic inbox. Processes data in the US under EU/UK approved Standard Contractual Clauses.
• PostHog (posthog.com), EU instance. Analyses anonymised website usage, only with your consent. Session recording is disabled.
• AestheticsDocs (drrheadaesthetics.aesthetidocs.app). The online booking system, with its own privacy policy.
• Google. The clinic's Google Business Profile and Google Maps link, governed by Google's policies.
• Hetzner (hetzner.com). Hosts the website infrastructure on EU servers (Germany).

We do not sell personal information to anyone, and we do not share information for advertising or profiling purposes.

How long we keep it

• Enquiry correspondence. Up to 24 months, then deleted, unless you become a patient.
• Patient clinical records. A minimum of 10 years after the last treatment, per GMC guidance (longer for paediatric records or where required by litigation, complaint or insurance).
• Financial records. 6 years from the end of the relevant tax year, per HMRC rules.
• Analytics data. Up to 12 months, per PostHog's default retention.

Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict, or port your information, to object to processing based on legitimate interests, and to withdraw consent where consent is our lawful basis. To exercise any of these, email drrheadaesthetics@gmail.com. We respond within one month, free of charge for reasonable requests.

Cookies and analytics

We use a small set of strictly necessary cookies that the site needs to function, and, with your consent, analytics cookies (PostHog). See the full cookie policy for the list of cookies and how to change your choice.

Children

We do not knowingly collect information from anyone under 18 through this website. Patients under 18 are not treated at the clinic.

Complaints

If you have a concern about how we handle your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline: 0303 123 1113. Online: ico.org.uk/make-a-complaint.

Changes to this notice

We may update this notice from time to time. The date at the top reflects the most recent change. For material changes that affect your rights, we will display a notice on the website.