We collect only the information needed to arrange appointments, assess suitability, provide treatment and maintain safe clinical records.
01 · Controller
Who we are
The Rejuvenation Doctors Limited is responsible for the personal information described in this notice. Clinical records are held and overseen by Dr Jamie Harrison on behalf of the company.
02 · Collection
Information we collect
Depending on how you use the website and the services you request, we may collect:
- Your name, date of birth, address, telephone number and email address.
- Appointment type, clinic date, booking history and payment status.
- Information about hair loss, medical history, medication, allergies, treatment goals and clinical suitability.
- For online hair consultations, photographs showing the front, sides, crown and back of the head.
- Consultation notes, consent records, treatment records, aftercare information and correspondence.
- Technical information such as IP address, browser type, device information, cookie choices and website activity.
- Marketing preferences where you actively choose to receive promotional communications.
03 · Purposes
How and why we use it
| Purpose | Primary lawful basis |
|---|---|
| Arrange, administer and take payment for appointments | Contract or steps requested before entering a contract |
| Assess suitability and provide medical consultation, treatment and aftercare | Contract and provision of health care by or under the responsibility of a health professional |
| Maintain accurate clinical, consent and financial records | Legal obligation, health care and legitimate interests in safe professional practice |
| Send booking confirmations and non-promotional reminders | Contract and legitimate interests in administering the appointment |
| Protect the website, prevent fraud and diagnose faults | Legitimate interests in providing a secure service |
| Measure website use or advertise services | Consent where cookies or electronic marketing rules require it |
Where we process health data for medical diagnosis, care or treatment, we rely on the relevant health-care condition in Article 9 of the UK GDPR and the Data Protection Act 2018. Information is handled under professional confidentiality.
Appointment reminders are service messages. We will not include promotional content unless you have separately agreed to receive marketing.
04 · Recipients
Who receives your information
Clinical records are held by Dr Jamie Harrison. Hilton House Medical receives the appointment details needed to support attendance at the clinic but does not receive wider clinical information through the website unless this is necessary for your care or required by law.
We use carefully selected service providers to operate the website and booking journey. These providers act under contract and may only use information to provide their service:
- Netlify for website hosting and delivery.
- Supabase for the secure booking database, authentication and photograph storage.
- Zoom when you choose an online hair-transplant consultation.
- The payment provider selected for online booking payments.
- Resend for booking confirmations and appointment reminders.
- Analytics and advertising providers, but only where the required consent has been given.
We may also disclose information when legally required, to protect a patient or another person from serious harm, to respond to regulators, or to establish or defend legal claims.
We do not sell patient information.
05 · Retention
How long we keep it
- Clinical records are kept for the period required for safe continuing care and to meet applicable professional, regulatory, insurance and legal requirements.
- Booking and financial records are generally retained for six years where needed for tax, accounting or legal purposes.
- Cookie-consent records are kept only for as long as needed to demonstrate and respect your choices.
- Marketing information is kept until you withdraw consent or object, after which a minimal suppression record may be retained.
Information is securely managed in accordance with applicable clinical, professional, regulatory and legal requirements.
06 · Protection
Security and international processing
We use access controls, encrypted connections, restricted administrative access and secure database and storage services. Website administration is initially restricted to Dr Jamie Harrison.
Some technology providers may process information outside the United Kingdom. Where this happens, we will use an approved legal transfer mechanism and appropriate contractual and technical safeguards.
No online system is completely risk free. Please do not send medical photographs through ordinary email unless specifically asked to do so through an approved secure process.
07 · Control
Your rights
Depending on the circumstances, you may ask us to:
- Provide a copy of your personal information.
- Correct inaccurate or incomplete information.
- Delete information that is no longer required.
- Restrict or object to particular uses.
- Provide information in a portable format.
- Withdraw consent where consent is the basis for processing.
Some rights are limited where information must be retained as part of a clinical record or to meet legal and professional obligations. Withdrawing consent does not affect processing that was lawful before withdrawal.
08 · Contact
Questions and complaints
Please contact Dr Jamie Harrison directly at info@therejuvenationdoctors.com or on 07565 926236.
If a data-protection concern is not resolved, you may complain to the Information Commissioner’s Office.