Privacy Policy

1. What Data We Collect

When you contact us, make an enquiry, or book an appointment, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Enquiry details and any information you voluntarily provide in your message
• Appointment booking information (date, time, treatment type)
• Health or medical information you disclose relevant to your suitability for treatment

We only collect information that is necessary for us to provide our services and respond to your enquiries. We do not collect sensitive personal data beyond what is directly relevant to your treatment.

2. How We Use Your Information

The personal data we collect is used solely for the following purposes:

• To respond to your enquiry or consultation request
• To book and manage your appointments
• To send you information relevant to your treatment, including pre- and post-care guidance
• To follow up after treatment if required
• To contact you regarding appointment reminders or rescheduling

We will not use your data for unsolicited marketing without your explicit consent. We will never send you spam or sell your contact details to third parties.

3. Legal Basis for Processing

We process your personal data on the following legal grounds under UK GDPR:

• Legitimate interests — to respond to enquiries and manage bookings as part of running our business
• Consent — where you have explicitly provided information and agreed to us contacting you
• Contractual necessity — to fulfil our obligations when you book a treatment with us

Where we rely on consent, you have the right to withdraw it at any time by contacting us at mark@scalpliners.co.uk.

4. Data Retention

We retain your personal data for a period of 3 years from the date of your last contact or treatment with us. This allows us to maintain accurate treatment records and provide continuity of care for touch-up sessions.

After this period, your data will be securely deleted or anonymised. You may request earlier deletion at any time (see Your Rights below).

5. Third Parties & Data Sharing

We do not sell, rent or share your personal data with third parties for commercial purposes.

We may use the following tools to manage communications and bookings, all of which are bound by their own data protection obligations:

• Google Calendar / Google Workspace (appointment scheduling)
• WhatsApp Business (client communication, operated by Meta)
• Email (via standard email providers)

We may be required to disclose information to law enforcement or regulatory bodies if required by law. In such cases we will only share the minimum data necessary.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you
• Right to rectification — you may ask us to correct inaccurate or incomplete data
• Right to erasure — you may request that we delete your personal data
• Right to restrict processing — you may ask us to limit how we use your data
• Right to object — you may object to us processing your data on legitimate interests grounds
• Right to data portability — you may request your data in a portable format

To exercise any of these rights, please contact us by email at mark@scalpliners.co.uk or by phone on 07549 402913. We will respond within 30 days.

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. Cookies

Our website uses only basic, essential cookies and limited analytics to help us understand how visitors use the site. We do not use advertising or tracking cookies.

• Basic analytics (page views, session data) — used to improve site performance
• No third-party advertising cookies are set
• No personally identifiable data is collected through cookies

You can control or disable cookies through your browser settings at any time. Disabling cookies will not affect your ability to use the site.

8. Data Security

We take reasonable steps to protect your personal data from unauthorised access, loss or disclosure. Client records are stored securely and access is limited to Mark Terrell as sole practitioner.

All email and online communications are transmitted over encrypted connections (HTTPS/TLS) where possible.

9. Data Requests & Contact

For any questions about this privacy policy, to make a data subject access request, or to request deletion or correction of your personal data, please contact:

Mark Terrell
ScalpLiners SMP Clinic
28 Millstream Close, Whitstable, Kent CT5 1RG
mark@scalpliners.co.uk
07549 402913

We aim to respond to all data-related requests within 30 days.