Privacy policy.

Who we are

The drBand Clinic is operated by DR BAND CLINIC LIMITED, a company registered in England & Wales (No. 13170629), registered office 6 Glebe House, Cross Lanes, Guildford GU1 1SX. The clinic practises at 5 Goodge Place, London W1T 4SD. We are the "data controller" for the information described here. Anything in this policy can be raised with us directly: info@drband.com · 07990 090069.

What we collect

• Enquiries and bookings, your name, contact details, appointment details, and anything you choose to tell us about your health when you call, email or WhatsApp us, or book through the online diary on our booking page.
• Clinical care, if you become a patient: your medical history, consultation notes, the written treatment plan, and clinical photographs taken at the clinic. These form your confidential clinical record.
• The virtual treatment plan, the photographs and video you send for a remote written plan, and the analysis we return.
• Model-day applications, your contact details, date of birth, areas of interest, relevant medical notes and the photographs you submit.
• Masterclass registrations, your name, contact details, profession and professional registration number.
• This website, almost nothing. We run no analytics and no marketing trackers; the only thing stored on your device is your cookie choice. See the cookie policy.

Why we use it, and our lawful bases

• To provide your care, assessments, treatment, aftercare, reviews and clinical record-keeping (performance of a contract, and Article 9(2)(h) UK GDPR: health care provided under the responsibility of a registered doctor bound by professional confidentiality).
• To answer enquiries and manage appointments (our legitimate interest in running the clinic).
• To meet legal and professional obligations, record retention, safety and regulatory requirements (legal obligation).
• Photography used beyond your record, teaching, portfolio or marketing use only ever happens with your explicit, written, signed consent (Article 9(2)(a)); see below.

We do not use your information for automated decision-making, and we do not send marketing you haven't asked for.

Photography & marketing imagery

Clinical photographs are part of your record and stay confidential by default. Nothing is published anywhere, teaching, portfolio or marketing, without your separate written consent, which sets out exactly where imagery may appear. You can withdraw that consent at any time; published copies are removed wherever feasible. Published imagery is anonymised, no names, no identifying captions or filenames.

Who we share it with

We never sell your information. It is shared only with: service providers who process it for us under contract (email and messaging providers, our website host, and Phorest, the appointment system that runs our online diary and holds booking details under its own privacy policy); regulators, insurers or courts where the law requires; and, only if you accept cookies, Google, whose embedded map loads on our contact blocks. Clinical records are accessible only to the clinical team.

How long we keep it

Clinical records are retained in line with medical record-keeping guidance, typically at least eight years for adults. Enquiry and application correspondence is kept only as long as it is needed, then deleted.

Your rights

You can ask us for a copy of your information (access), to correct it, to delete what we don't need to keep, to restrict or object to processing, to receive data you provided in a portable form, and to withdraw any consent at any time. Write to info@drband.com, we respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk · 0303 123 1113), though we'd welcome the chance to put things right first.

Changes

If this policy changes, the date above changes with it. Significant changes are flagged on this page.