Privacy.

Who we are

Cove Clinic is a nurse-led aesthetic clinic at 8 Devonshire Street, Penrith, Cumbria CA11 7SR, run by Gina, a registered nurse. Cove Clinic is the data controller for the information described here. For anything about your information, email info@cove-clinic.co.uk or call 07709 266584.

What we collect

Your contact details: name, phone number, email address and, where you give it, your address and date of birth.

Your health information: the medical history you give at consultation, your consent forms, a record of each treatment, including the products used and where, and clinical photographs taken before and after treatment. This is special category data under data protection law, and we treat it with the care that implies.

Your bookings: the details you enter when you book online through Collums, our booking system, and the record of your appointments. Card payments are taken by Collums or at the clinic; we do not hold your card details.

Your correspondence: what you send us by phone, email, text, WhatsApp or Instagram message, and our replies.

Why we use it, and the lawful basis

To give you safe care: your medical history, consent forms and treatment records exist so that treatment is suitable for you and so that any later treatment can take account of what came before. The lawful basis is the provision of health care under the responsibility of a registered health professional, together with our contract with you.

To run your appointments: to book, confirm, remind and reschedule, and to take payment. The lawful basis is our contract with you.

To take and keep clinical photographs: as part of your record, to plan treatment and to judge its results. The lawful basis is the same as for your other clinical records. Any use beyond your record, such as on our website or social media, needs your separate written consent, which you can withdraw at any time.

To keep in touch about offers or news: only if you have asked us to. The lawful basis is your consent, and every message tells you how to stop them. Appointment reminders are not marketing and are sent regardless.

To meet our legal and professional obligations: including keeping records for the periods the Nursing and Midwifery Council and our insurers expect, and defending or bringing legal claims if ever needed.

Who we share it with

Collums, the booking and clinical records system we use, holds your booking and treatment records on our behalf under a contract that allows it to use them only for that purpose. Its own privacy policy is shown when you book.

For prescription-only treatments, the prescriber who assesses you and the pharmacy that dispenses the medicine see the information they need to prescribe and supply it safely.

Your GP or another clinician, only if you ask us to, or in an emergency where it is needed for your care.

Our insurers, our professional regulator, the police, courts or other authorities, where the law or a legal process requires it.

We never sell your information, and we never pass it to anyone else for their marketing.

How long we keep it

Clinical records, including photographs and consent forms, are kept for eight years from your last treatment, in line with the guidance that applies to private health records in England. They may be kept longer if a complaint or claim is open.

Enquiries that do not lead to a booking are deleted after twelve months. Booking records are kept with your clinical record. Marketing consent is kept until you withdraw it.

Where it is kept and how it is protected

Your records are held in Collums, which stores data in the United Kingdom, and any paper records are kept locked at the clinic. Only Gina and anyone she is directly responsible for can see them, and only when there is a reason to. Where any service we use stores data outside the UK, we rely on the safeguards UK data protection law provides for that.

This website

This website sets no cookies and runs no analytics or advertising trackers, so visiting it collects nothing about you. It links to Collums for booking, to Google Maps for directions and to Instagram, each of which has its own privacy policy once you are there.

Your rights

You can ask for a copy of the information we hold about you, free of charge, and we will provide it within a month. You can ask us to correct anything that is wrong, to delete information, to limit how we use it, or to send it to someone else, and you can object to any use that rests on our legitimate interests. Clinical records are an exception to deletion: we are required to keep them for the period above even if you ask otherwise, though we will tell you why.

You can withdraw any consent you have given at any time, including for photographs and marketing. Withdrawing consent does not affect anything done before it.

To use any of these rights, email or call us. We may ask you to confirm your identity first.

Complaints

If you are unhappy with how we have handled your information, tell us and we will put it right where we can. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this notice changes, the new version will appear here with a new date. Anything that changes how we use information you have already given us will be explained to you directly.