Legal
Privacy Policy
The Flamingo Clinic is the data controller for the personal information described below. We are committed to protecting your privacy under the UK GDPR and the Data Protection Act 2018.
Information we collect
- Contact details — name, email address, telephone number and postal address.
- Health information — medical history, medications, allergies, consultation notes, treatment records, consent forms and clinical photographs where you have agreed to them.
- Transaction information — orders, appointments and payment confirmations. We do not store full card details.
- Website data — cookies and basic analytics such as pages viewed and device type.
Lawful bases for processing
- Contract — to provide treatments, fulfil orders and manage appointments.
- Legal obligation — to meet professional, clinical record-keeping and tax requirements.
- Consent — for marketing emails, newsletters and clinical photography. You may withdraw consent at any time.
- Legitimate interests — to improve our services and keep the clinic and website secure.
Health data is special category data. We process it under Article 9(2)(h) UK GDPR for the provision of health care by a regulated health professional bound by a duty of confidentiality.
How we use your information
To assess suitability for treatment, deliver safe clinical care, provide aftercare, manage appointments and orders, respond to enquiries, and — where you have opted in — to send newsletters and clinic updates.
Sharing your information
We never sell your data. We share it only where necessary with our booking and scheduling provider, payment processors, delivery partners, prescribing pharmacies, our insurers and professional advisers, and with regulators or authorities where the law requires it. All processors are bound by written agreements.
Retention
Clinical records are retained for a minimum of 8 years after your last treatment, in line with professional guidance. Order and financial records are kept for 6 years. Marketing consents are held until you unsubscribe.
Security
Records are stored on access-controlled, encrypted systems and paper records are kept in locked storage. Access is limited to those who need it to deliver your care.
Your rights
- Access a copy of the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request erasure, where we are not legally required to retain the record.
- Restrict or object to certain processing.
- Request data portability.
- Withdraw consent for marketing at any time.
To exercise any right, email natalie@theflamingoclinic.com. We will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk) or use our complaints procedure.
Cookies
We use essential cookies to make the website work and optional analytics cookies to understand how it is used. You can accept or decline optional cookies using the banner shown on your first visit, and change your browser settings at any time.
Contact
The Flamingo Clinic, 50 Hawkins Crescent, Shoreham-by-Sea, BN43 6TP. Email natalie@theflamingoclinic.com or call 07719 602118.