About This Policy
This policy explains what personal information Lipo Freeze collects, why it is collected, how it is used and what rights you have in relation to it.
Template notice. This policy is provided as a starting template. The operator’s registered details, data protection contact route and effective date are shown as placeholders and must be completed, and the whole document reviewed by a qualified adviser, before this site is published.
Operator: [ REGISTERED OPERATOR NAME AND ADDRESS TO BE CONFIRMED ]
Data protection contact: [ CONTACT ROUTE TO BE CONFIRMED ]
Effective date: [ DATE TO BE CONFIRMED ]
Information Collected
Lipo Freeze collects only the information needed to respond to an enquiry, assess suitability for treatment and deliver that treatment safely. In practice this falls into three categories.
Contact information
Your name, the contact details you provide when enquiring, and the address at which treatment would take place. This is used to respond to you and to arrange appointments.
Health information
Details of your medical history, existing conditions, medications, implants or devices, previous procedures, and whether you are pregnant or breastfeeding. Health data is a special category of personal data under UK data protection law and is treated with correspondingly greater care. It is collected because several of the treatments offered carry absolute contraindications, and identifying those before treatment is the primary safety obligation of the service.
Treatment records
Notes of the assessment carried out, the treatment plan discussed, the treatment delivered and any aftercare guidance given. These support continuity of care across appointments and any follow-up conversation.
No information is collected simply because it might be useful later. If a piece of information is not needed for one of the purposes above, it is not requested.
How Information Is Used
- To respond to your enquiry and answer your questions.
- To assess whether a treatment is appropriate and safe for you.
- To arrange, deliver and follow up on treatment.
- To maintain records of care provided.
- To meet legal, regulatory and insurance obligations.
Your information is not sold, rented or shared with third parties for their own marketing purposes. It is not used to build advertising profiles.
Legal bases
Contact information is generally processed on the basis of your consent, or because it is necessary to take steps at your request prior to entering into a contract, or to perform that contract. Health data is processed on the additional basis applicable to the provision of health or treatment services and the assessment of suitability for them, and with your explicit consent where required. Where information is retained to meet a legal obligation, that obligation is the basis for retaining it.
Sharing and Retention
Who information may be shared with
Information may be shared with the practitioner delivering your treatment, and with service providers who support the operation of the business — for example appointment scheduling or secure record storage — who are permitted to use it only for that purpose. It may also be disclosed where required by law, or where necessary to protect someone’s vital interests.
How long information is kept
Treatment records are retained for the period required by professional, legal and insurance obligations. Enquiry information that does not lead to treatment is kept only for as long as needed to deal with the enquiry. Retention periods are set by reference to those obligations rather than kept open-ended.
Security
Appropriate technical and organisational measures are used to protect personal information against unauthorised access, loss or disclosure, with access restricted to those who need it to carry out the purposes described above.
Your Rights
Under UK data protection law you have the right to:
- Ask what personal information is held about you and obtain a copy.
- Have inaccurate information corrected.
- Ask for information to be erased, where no overriding obligation requires it to be kept.
- Ask for processing to be restricted in certain circumstances.
- Object to processing carried out on the basis of legitimate interests.
- Request portability of information you provided.
- Withdraw consent at any time, where consent is the basis for processing.
- Complain to the Information Commissioner’s Office.
Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn. Where information must be retained to meet a professional or legal obligation, that will be explained in response to any erasure request.
Cookies and website analytics
This website loads a web font from a third-party font service in order to display its typography, which involves a request to that provider. Any additional cookies, analytics or tracking used on the live site must be documented here before publication, together with the means of consenting to or declining them.
Changes to this policy
Any material change to this policy will be reflected here, with the effective date updated accordingly.