Privacy Policy

This Privacy Policy ensures compliance with UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018) and provides transparency about how personal data is handled. 

Sula Clinic Ltd respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website and services.

1. Who We Are

We are Sula Clinic Ltd, a provider of medical aesthetic and wellness treatments, located at 54 Cowells Road, Woodstock OX20 1GB. For any questions regarding this Privacy Policy or how your personal data is handled, please contact:

2. What Information We Collect

We collect and process your personal data when you use our services or interact with us. This includes:

a. Information You Provide Directly

  • Contact Details: Name, email address, phone number, and address.

  • Medical and Treatment Information: Medical history, treatment preferences, and consultations.

  • Payment Information: Card details and billing address for transactions.

b. Information We Collect Automatically

  • Technical Data: IP address, browser type, and device information.

  • Usage Data: Pages visited, time spent on our site, and referral sources.

c. Information from Third Parties

  • Social Media Platforms: Information shared when you interact with us via Facebook, Instagram, or similar platforms.

  • Appointment Scheduling Tools: Data from external systems used to book appointments.

3. How We Use Your Information

We process your personal data for the following purposes, in line with the UK GDPR’s lawful bases:

  • Purpose.

  • Lawful Basis.

  • To provide treatments and services.

  • Performance of a contract.

  • To manage appointments and payments.

  • Legitimate interests and legal obligations.

  • To send marketing communications (e.g., newsletters).

  • Consent (you can withdraw at any time).

  • To maintain medical and treatment records.

  • Legal obligation under health regulations.

  • To improve website functionality and user experience.

  • Legitimate interests.

4. How We Share Your Data

We may share your personal data with:

  • Service Providers: Payment processors, IT support, and marketing agencies.

  • Medical Professionals: For consultations or referrals (with your consent).

  • Legal and Regulatory Authorities: When required by law.

  • Business Transfers: In case of mergers or acquisitions.

We ensure all third parties protect your data and comply with UK GDPR requirements.

5. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you.

  • Rectification: Request corrections to inaccurate or incomplete data.

  • Erasure: Request deletion of your data (subject to legal requirements).

  • Restriction: Request to limit how we process your data.

  • Objection: Object to processing for certain purposes, such as direct marketing.

  • Data Portability: Request transfer of your data to another provider.

To exercise your rights, please contact us at info@sulaclinic.co.uk. We will respond within one month, as required by law.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Medical records must be retained for a minimum of 8 years.

7. How We Protect Your Data

We implement technical and organisational measures to safeguard your data, including encryption, secure servers, and access controls. However, no system is completely secure, so we encourage you to take precautions when sharing data online.

8. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience and collect analytics data. You can manage your cookie preferences through your browser settings.

For more information, see our Cookie Policy.

9. Marketing Communications

We may send you marketing messages about our services and promotions if you have opted in. You can unsubscribe at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices, and we encourage you to review their policies.

11. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with the revised effective date.

12. Contact Us

For questions or concerns about this Privacy Policy or your data, please contact us:

Email: info@sulaclinic.co.uk

Phone: 01993 684664

Address: 54 Cowells Road, Woodstock OX20 1GB

If you believe your data rights have been violated, you can file a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk

Effective Date: [28/12/2024]
Last Updated: [28/12/2024]