Privacy notice
This notice explains how Hair Transplants London (hairtransplantslondon.com, "we", "us") uses your personal data. We are the data controller for the information you submit on this website. Contact: hello@hairtransplantslondon.com.
What we collect
- Enquiry details you give us: the treatment you are interested in, who it is for, how long you have noticed hair loss, any previous transplant, your preferred timing, your preferred area of London, your name, email, mobile number, the best time for the clinic to contact you and any notes.
- Health information: information about your hair loss and treatment history. This is "special category" data under UK GDPR.
- Technical data: the page you came from, campaign tags (such as utm_source), your browser type, your approximate country and a one-way hash of your IP address. We use this to prevent spam and understand which pages bring enquiries.
Why we use it and our lawful basis
- To pass your enquiry to a partner clinic so they can contact you – your consent (UK GDPR Article 6(1)(a)), and for health information your explicit consent (Article 9(2)(a)).
- To send you marketing from the clinic – only if you tick the separate, optional marketing box (consent; PECR).
- To keep the site secure and prevent spam or fraud – our legitimate interests (Article 6(1)(f)).
- To keep records of the consent you gave – legal obligation and legitimate interests.
Who we share it with
We share your enquiry with one partner clinic in London that matches your request (a CQC-registered clinic where surgery is carried out by GMC-registered doctors: [Partner clinic name – to be confirmed]). The partner becomes a separate controller of your data once they receive it and will handle it under their own privacy notice. We will tell you who they are. We also use service providers who process data on our behalf under contract: Vercel Inc. (website hosting; your enquiry passes through its servers but is not stored there) and Google (Google Workspace / Google Sheets, where we keep the record of your enquiry). Some of these providers may process data outside the UK under UK-approved safeguards such as the International Data Transfer Addendum.
We do not sell your data to anyone else, and we never share it with more than the one partner without asking you first.
How long we keep it
We keep your enquiry for up to 30 days after it has been passed to the partner, unless you ask us to delete it sooner. We keep a minimal record of your consent (what you agreed to and when) for up to 2 years so we can show we handled your data properly.
Your rights
You can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on consent you can withdraw it at any time by emailing hello@hairtransplantslondon.com; this does not affect anything we did before you withdrew. If you are unhappy, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
This website does not use advertising or analytics cookies. We store your landing page and campaign tags in your browser's session storage for the length of your visit so we can record where your enquiry came from. This is cleared when you close the tab.
Security
Enquiries are sent over an encrypted connection and stored in a private Google Sheet that is not publicly accessible. Access is limited to the people who need it to handle your enquiry. We do not accept file or photo uploads through this website.
Changes
We may update this notice. The date at the top shows when it last changed.