Privacy Policy for Glow Aesthetics Clinic
1. Introduction
At Glow Aesthetics Clinic, one of our main priorities is the privacy of our visitors. This Privacy Policy explains the types of information that is collected and recorded by us when you use our services or website, and how we use this information.
​
This Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in Glow Aesthetics Clinic. This policy is not applicable to any information collected offline or via channels other than this website.
​
If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.
​
Definitions relating to this policy:
“we”, “us” and “our” refer to The Company
“website” refers to our website
“user,” “users,” “you” and “your” refer to anyone who visits our website
​
Throughout this policy we will explain how we intend to use your personal data and the legal grounds on which we will process such data. We have also explained what our legitimate interests are, where relevant. We will only use you personal data when the law allows us to do so, for one of the following reasons:
-
When the processing is necessary for a contract we have with the you, or because you have asked us to take specific steps before entering into a contract.
-
When the processing is necessary for us to comply with the law (not including contractual obligations).
-
When the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
​
2. Our Details
Company Name: Glow Aesthetics Clinic
Website: www.glowaestheticscumbria.co.uk
Data Protection Officer: Charlene Meteer
Email addres: glowaesthetics.cumbria@outlook.com
​
3. Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms. If you do not consent to our privacy policy you must stop using our website immediately.
​
4. Information we collect
Personal data means any information about an individual from which that person can be identified. It does not include data where the identity of the individual has been removed (anonymous data).
The personal information that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point we ask you to provide your personal information.
​
We may collect, use, store, share and transfer various kinds of personal data about you, the following is a list of personal data we may collect:
-
identity data:
includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender -
contact data:
includes billing address, delivery address, email address, and phone numbers -
financial data:
includes bank account and payment card details
-
transaction data:
may include payments to and from you and other details of products and services you have purchased from us -
technical data:
includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug in types and versions, operating system and platform and other technology on the devices you use to access our electronic services -
profile data:
includes your username and password, purchases or orders made by you, your preferences, feedback and survey responses collated by analytical cookies -
marketing and communications data:
includes your preferences in receiving marketing from us and your communication preference -
aggregated data:
we may also collect use and share aggregated data such as statistical or demographic data for any purpose. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. If we combine or connect aggregated data with your personal data so that it can identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy. -
usage data:
includes information about how you use our website, products and services
​
It is necessary for our business to collect Special Categories of Personal Data (such as information relating to your health), we will obtain your consent for this information.
​
5. How we collect your personal data
We collect your data through a variety of routes, including (but not limited to) the following:
​
Directly from you - You may provide your identity, contact, financial, transaction and technical data by filling in forms or through contact with us by post, phone, email or otherwise. This includes personal data you provide when you:
-
Order products and services;
-
create an account on our website;
-
consent to marketing;
-
communicate with us via social media
-
give us feedback;
-
make an enquiry via our online contact forms
​
Third parties - We may receive personal data about you from third parties, including (but not limited) to social media platforms, when you log in or sign up using your social media account or advertising and marketing partners in order to monitor ad campaigns. ​Third-party ad servers or ad networks uses technologies like cookies, JavaScript, or Web Beacons that are used in their respective advertisements and links that may appear on Glow Aesthetics Clinic, which are sent directly to users' browser. They automatically receive your IP address when this occurs. These technologies are used to measure the effectiveness of their advertising campaigns and/or to personalise the advertising content that you see on websites that you visit. Note that Glow Aesthetics Clinic has no access to or control over these cookies that are used by third-party advertisers. Glow Aesthetics Clinic's Privacy Policy does not apply to other advertisers or websites. Thus, we are advising you to consult the respective Privacy Policies of these third-party ad servers for more detailed information. It may include their practices and instructions about how to opt-out of certain options.
​
Financial data - If you make a payment using your credit or debit card, this will be processed via a third party such as Wix Payments or Paypal. We do not store your financial data.
​
Log Files - Glow Aesthetics Clinic follows a standard procedure of using log files. These files log visitors when they visit websites. All hosting companies do this and a part of hosting services' analytics. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site, tracking users' movement on the website, and gathering demographic information.
​
Automated technologies or interactions - As you interact with our website, we may automatically collect transaction data and technical data about your equipment, browsing actions and patterns. This is collected by using cookies and other similar technologies.
​
Cookies and Web Beacons
Like any other website, Glow Aesthetics Clinic uses "cookies". These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimise the users' experience by customising our web page content based on visitors' browser type and/or other information.
​
You can choose to disable cookies through your individual browser options. To know more detailed information about cookie management with specific web browsers, it can be found at the browsers' respective websites.
6. How we use your information
We use the information we collect in various ways, including to:​
-
Understand and analyse how you use our website
-
To allow us to provide you with the products or services you have requested/purchased
-
Deliver content tailored to your interests
-
Communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes
-
Send you emails
-
Find and prevent fraud
​​
7. Sharing of information
At Glow Aesthetics Clinic we may have to share some or all of your data with trusted third parties, as shown below:
-
With a potential buyer if we want to sell our business
-
HM Revenue & Customs, regulators and other authorities
-
Service providers who provide software such as booking systems, payment processing, website services, email marketing
-
Search engine facilities, advertising and marketing
-
Professional advisors including lawyers, bankers and accountancy services
​
In some circumstances we are legally obliged to share information such as complying with legal obligations or under a court order. We require all third parties that we share your data with to treat it in accordance with the law.
​
8. Protecting your personal data
We appreciate your trust in us and will take all reasonable steps in order to protect the information you provide us and prevent unauthorised access, maintain accuracy and ensure proper use of information, in accordance with your rights under GDPR (General Data Protection Regulation) and the law.
​
9. GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
Right to be informed - You have the right to be informed about the collection and use of your personal data
The right to access – You have the right to request copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability - You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to lodge a complaint - You have the right to make a complaint at any time to the Information Commissioner's Office (ICO). Please contact us in the first instance to allow us the opportunity to resolve any issues/concerns.
You also have rights with respect to automated decision-making and profiling.
If you would like to exercise any of these rights, please contact us on the above contact details and we will try to respond as soon as possible.​
​
For more information on your rights, please see Information Commissioner's Office (ICO) (https://ico.org.uk/).
​
10. Children's Information
Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity.
Glow Aesthetics Clinic does not knowingly collect any Personal Identifiable Information from children under the age of 13. If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.
​
11. Storing data outside of the European Economic Area (EEA)
Some of the third party providers which we use, may be based outside of the European Economic Area (EEA), which will involve a transfer of your data outside of the EEA. We will take all reasonable steps to ensure your information security and privacy will be treated as securely as it would be under the GDPR and within the EEA by implementing one of the following safeguards.We may use an approved code of conduct together with binding and enforceable commitments or certification under an approved certification mechanism together with binding and enforceable commitments of the receiver outside the EEA. We may use third party providers based in the United States, whom we may transfer data to if they are part of the EU-US Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US. Your acceptance of this Privacy Policy shall be your consent permitting us to store or transfer data outside the EEA if it is necessary for us to do so.
12. How long we will keep your data?
We periodically review our records to ensure we're not retaining information for longer than we need to. By law we're required to keep basic information on our clients for six years after they cease being customers due to tax reasons.
​
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately, after they are posted on this page.
​
14. Data accuracy
It is important that the personal data we hold about you is accurate and current. Keep us informed if your personal data changes by contacting our Data Protection Officer.
​
15. Failure to provide personal data
Where we need to collect personal data to answer any enquiry you make, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to deal with your enquiry, enter into a contract (for example, to provide goods and services) or create an account for you. We will notify you if this is the case at the time.
​
14. Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.