Privacy policy

Last updated: December 19, 2024

La Rose Clinic Privacy Policy

1. Background
MedPro understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our clients and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.

For avoidance of any doubt, throughout this privacy policy, La Rose Clinic may be referred to as ‘we’, ‘us’ and ‘the company’. We may also refer to our platform users as ‘you’, ‘service users’ and ‘users’.

2. Information About La Rose Clinic’s Registration with the ICO
La Rose Clinic is proudly registered with the ICO.
Registration reference: ZB549507
Date registered: 23 May 2023
Registration expires: 22 May 2025

3. Our contact details
La Rose Clinic
Unit 3a,
25 Procter Street,
London WC1V 6NY
info@laroseclinic.co.uk

4. The type of personal information we collect
We currently collect and process the following personal information:

  • ID, Name, date of birth, age, marital status
  • Address (shipping, billing, and home)
  • Email address, IP address
  • Phone number (telephone and mobile)
  • Banking Details
  • Medical History
  • Medical Characteristics as necessary for wellness consultation and diagnostics
  • Medical Records of Treatment (client requests for information on treatment, descriptions, and photographs of treatment)
  • Treatment Consent Form Questionnaire details from clients (containing information such as allergies, diseases, etc.)

5. How we get your personal information and why we collect it
A majority of the personal information that we process is directly provided to us, by you, for one of the following reasons:

  • Medical Treatments
  • Consultation
  • Creating an account to use our services
  • Carrying out payments

We use the personal information you give us to:

  • Provide Medical Treatment
  • Create customer accounts
  • View medical records
  • Provide consultations
  • Carry out diagnosis
  • Establish treatment plans
  • Give price quotations
  • Receive payments
  • Verify patient identity
  • Confirm appointment booking and payments
  • Remind you of your appointments with us
  • Alert you of promotions
  • Contact you about treatment aftercare
  • Request customer reviews of our services
  • To ensure that you give fully informed consent prior to each treatment and that we are aware of any factors of a patient's medical history that could affect the safety of a treatment, your suitability, or whether we should refuse treatment.

Disclosing your Personal Data
As is usual for most businesses, in certain circumstances, we may have to disclose your personal information to a third party (acting as a data processor/sub-processor) to provide our services to you.

We may share this information with:

  • Square Limited - to help process your payments for our services and retain banking details to make repeat payments simpler if the customer desires (Square Limited’s privacy practices)
  • Zenoti - to assist you in booking appointments for our services (Zenoti’s privacy practices)
  • The National Health Service (NHS) - to document and share details of any services we have provided you with your GP (NHS privacy practices)
  • Stripe Payments UK Limited - to receive payments from you, as required to provide you with our services and treatments (Stripe privacy practices)

Lawful Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing your personal information are:

  • Contractual obligation - Necessary for a contract or pre-contractual steps.
  • Legal obligation - To ensure compliance with the law.
  • Legitimate interest - When we or a third party have a legitimate interest.

6. How we store your personal information
We keep all personal information for as long as is necessary according to the purpose it was given or collected for. We will then dispose of this information by destroying files from our system.

Data Security
Your information is stored securely in the cloud, Zenoti, Google Drive, and Microsoft SharePoint. Only authorised individuals can access your information.

7. Your data protection rights
Under data protection law, you have rights over the way your personal data is processed, including:

  • Right to be informed - About the collection and use of your personal data.
  • Right of access - To request copies of your personal information.
  • Right to rectification - To correct inaccurate or incomplete data.
  • Right to erasure - To request deletion of your personal information in certain circumstances.
  • Right to restrict processing - To limit the processing of your personal information.
  • Right to object - To processing in certain circumstances.
  • Right to data portability - To transfer your personal data to another organisation.

Requests can be made without charge and are responded to within one month.

8. How to Complain
If you have any concerns about our use of your personal information, you can make a complaint to us at info@laroseclinic.co.uk.

You can also contact the ICO:
Information Commissioner’s Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline number: 0303 123 1113
ICO website

9. Changes to this Privacy Policy
We may change this Privacy Notice from time to time. This may be necessary if the law changes or if we change our business. Updates will be made available on our website: https://laroseclinic.co.uk