Skip to main content
Crown Hair Clinic

01Privacy

Privacy Policy

Draft skeleton — review required before publication.

How information may be handled when interacting with Crown Hair Clinic. This page is a structural draft and is not yet the clinic's final published privacy policy.

Crown Hair Clinic intends to handle personal information with discretion. This page will set out, once finalised, what may be collected, why, the lawful basis, who receives it, how long it is kept, and how individuals can exercise their rights.

Who this policy is for

This policy is intended for people who visit this website or who, in future, submit an enquiry through it. The exact scope, controller details and audience description should be confirmed during legal review.

Information collected through enquiry forms

The Contact and Book Consultation forms collect only the minimum information needed to reply to an enquiry. Sensitive clinical or financial information is not collected through these forms. The final policy should re-state this list verbatim and confirm the lawful basis for each field during legal review.

  • Full name and email address — required to reply.
  • Telephone number — optional, provided only if the user chooses to share it.
  • Preferred language and preferred contact method — used to route the reply.
  • Treatment interest — an optional indicative selection on the Book Consultation form.
  • A short free-text message — content of the enquiry itself.
  • Privacy-consent confirmation timestamp.
  • Technical data automatically logged by the hosting platform for security and reliability.

How enquiries may be handled

Enquiries are intended to be handled with discretion. The internal pathway for receiving, acknowledging and responding to enquiries should be documented here once operational practice is confirmed.

Cookies and analytics

Cookies and analytics tooling are not active in the current build. Once configured, the categories of cookies, the analytics provider chosen, and the consent mechanism will be described here. A separate Cookie Policy page sets out further details.

Data retention

Exact retention periods are pending confirmation. The final document should state the retention period for each category of personal information, the criteria used to determine it, and any legal obligations that influence it.

Data sharing

Categories of recipients (for example, transactional email providers, hosting providers, security services) and any cross-border transfers are pending confirmation. Named processors are not listed in this draft and will be added once contracts and roles are confirmed.

Individual rights

The final policy should set out the rights individuals may have in relation to their personal information, including how to make a request and how that request will be handled. Exact rights depend on the applicable jurisdiction and should be confirmed during legal review.

Contact route

Privacy-related enquiries can be raised through the Contact form. The dedicated route for formal privacy requests should be confirmed during legal review. No email address, telephone number or postal address is published in this draft.

Book Consultation