Your information, handled carefully.
Privacy notice
LHT CLINICS LTD trading as London Hair Trust is the data controller for personal information it processes for its own purposes. ICO registration: ZC263240.
Information we collect
- contact and identity details;
- enquiry and consultation information;
- relevant health and medical information;
- clinical photographs and treatment records;
- correspondence and follow-up information;
- booking, payment and transaction records;
- website usage and analytics information where enabled and permitted; and
- information relating to complaints, incidents or safety concerns.
How and why we use your information
We use personal information to respond to enquiries, arrange consultations, assess and provide care, maintain clinical records, manage bookings and payments, communicate with you, protect patient safety, handle complaints and meet applicable legal, regulatory and professional responsibilities.
Our lawful bases
Depending on the purpose, we process personal information where this is necessary to take steps at your request or perform our contract with you, comply with a legal obligation, pursue a legitimate interest where your rights do not override that interest, or where you have given consent.
Health information and other special-category data require an additional condition under UK data-protection law. Where we process this information for assessment, treatment and the management of healthcare, we rely on the healthcare condition where its requirements are met. Where identifiable photographs or testimonials are used for optional marketing, separate explicit consent is obtained.
Clinical and marketing photographs
Clinical photographs may form part of your confidential clinical record where they are required for assessment, treatment planning, documenting your care or follow-up.
We will not use identifiable patient photographs for marketing, our website or social media simply because they form part of your clinical record. Marketing use requires separate permission, which can be withdrawn in accordance with the information provided when consent is obtained.
Clinical systems and who we share information with
Clinical records are managed using Medesk. Where necessary and appropriate, information may also be shared with treating clinicians, healthcare providers involved in your care, service providers acting on our behalf, payment and communications providers, professional advisers, insurers, regulators or public authorities where the law requires or permits it. We only share information that is relevant for the purpose.
International transfers
If personal information is transferred or made accessible outside the UK, we will use an appropriate safeguard or other lawful transfer mechanism required by UK data-protection law. Further information about applicable safeguards can be requested from us.
How long we keep your information
We keep personal information only for as long as necessary for the purpose for which it was collected and to meet applicable clinical, legal, regulatory, insurance and accounting requirements. Different categories of information may therefore be retained for different periods. Retention periods are reviewed and information that is no longer required is securely deleted or anonymised where appropriate.
Your rights
Depending on the circumstances, you may have rights to access your personal information, ask us to correct it, request erasure or restriction, object to certain processing, receive certain information in a portable format, and withdraw consent where processing relies on consent. Some rights are subject to legal limitations, including where information must be retained for healthcare or legal reasons.
Cookies and website data
Information about cookies and similar technologies used on this website, including how to manage your choices where applicable, is available in our Cookie Information.
Questions and complaints about your information
For privacy enquiries, contact [email protected]. You also have the right to complain to the Information Commissioner’s Office if you are concerned about how your personal information has been handled. Visit the ICO complaints service for further information.