The Skin & Joint Injection Clinic (“we”, “us”, “our”) is committed to protecting your privacy and handling your personal information responsibly. This policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it. It applies to our website and to the care we provide at our clinic in Wirral.
Who we are
The data controller responsible for your information is Dr Soul Mugerwa, trading as the Skin & Joint Injection Clinic, Higher Bebington Health Centre, 25 Brackenwood Road, Higher Bebington, Wirral, CH63 2LR. If you have any questions about this policy or how your data is handled, you can contact us by email at info@skinjointclinic.co.uk or by phone on +44 151 203 7840.
The information we collect
Depending on how you interact with us, we may collect:
- Identity and contact details — your name, date of birth, address, email address and telephone number.
- Health information — details of your medical history, symptoms, the conditions we assess or treat, medications, and clinical notes and images created during your care. This is “special category” data and is treated with the highest level of protection.
- Appointment and payment information — bookings, consultation records and the details needed to process payment for private treatment (card payments are handled securely by our payment provider; we do not store full card numbers).
- Enquiry information — anything you tell us when you contact us through the website contact form, by email or by phone.
- Website and technical data — information collected automatically when you use our website, such as your IP address, device and browser type, and the pages you visit (see “Cookies and analytics” below).
How and why we use your information
We use your information to:
- Provide and manage your care, including assessment, treatment and follow-up.
- Respond to your enquiries and manage your appointments.
- Take payment for private treatment and keep accurate financial records.
- Maintain accurate clinical records as required by law and professional standards.
- Meet our legal, regulatory and safety obligations, including those set by the Care Quality Commission (CQC) and the General Medical Council (GMC).
- Improve our website and services and understand how our website is used.
Our lawful basis
Under UK GDPR we rely on the following lawful bases for processing your information:
- Provision of healthcare — for your clinical care we rely on Article 9(2)(h) (provision of health treatment and management of healthcare services), supported by Article 6(1)(b) and (c).
- Legitimate interests — for responding to enquiries, running our website and improving our services, where these do not override your rights.
- Consent — for optional analytics and marketing cookies, and for any optional communications. You can withdraw consent at any time.
- Legal obligation — where we are required to keep records or share information by law.
Who we share your information with
We do not sell your information. We only share it where necessary, for example with:
- Your GP or other healthcare professionals involved in your care, with your consent, to support safe treatment.
- Trusted service providers who help us run the clinic (for example our secure clinical records and booking system, and our payment provider), under contracts that require them to protect your data.
- Regulators, insurers or legal authorities where we are required or permitted to do so by law.
Where any provider processes data outside the UK, we ensure appropriate safeguards are in place as required by UK GDPR.
Cookies and analytics
Our website uses cookies and similar technologies. Some are essential for the site to work; others help us understand how the site is used so we can improve it. With your consent we use:
- Google Analytics and Google Tag Manager — to measure website traffic and how visitors use the site.
- Microsoft Clarity — to understand how pages are used through aggregated interaction data.
- Meta (Facebook) Pixel — to measure the effectiveness of any advertising.
You can accept or decline non-essential cookies using the cookie banner when you first visit, and you can change your browser settings at any time to manage or delete cookies.
How long we keep your information
We keep clinical records for the periods recommended for private adult healthcare records (generally a minimum of eight years after your last treatment, and longer for certain records), in line with professional guidance and legal requirements. Website enquiry data is kept only as long as needed to deal with your enquiry. When information is no longer required, it is securely deleted or anonymised.
How we protect your information
We use appropriate technical and organisational measures to keep your information secure, including restricted access, secure clinical systems and confidentiality obligations on everyone involved in your care.
Your rights
Under UK GDPR you have the right to:
- Access the personal information we hold about you.
- Ask us to correct inaccurate or incomplete information.
- Ask us to erase your information, where we are not required to keep it.
- Restrict or object to certain processing.
- Request a copy of certain information in a portable format.
- Withdraw consent where we rely on it.
To exercise any of these rights, please contact us at info@skinjointclinic.co.uk. We will respond within one month.
Complaints
If you have a concern about how we handle your data, please contact us first so we can put things right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised “last updated” date.