Privacy policy

This policy explains what Midland Contour Clinic does with your personal information when you use this website, make an enquiry, buy a product or come in for treatment.

Who is responsible for your information

Midland Contour Clinic is the data controller. You can reach us on 07723 626 250, by email at info@midlandcontourclinic.com, or at either clinic:

• Cotswold Rd, Nottingham NG8 6LE
• Burnt Tree, Tipton DY4 7UF

What we collect, and why

When you make an enquiry

The contact form asks for your name and email address, and optionally your phone number, which clinic you are interested in, which treatment, how you heard about us, and your message. We use these only to answer you. The lawful basis is our legitimate interest in responding to people who contact us.

The form deliberately asks you not to send detailed medical information. We take that at your consultation instead, where it can be handled properly.

When you come in for treatment

Before treatment we ask about your health, any surgery you have had, medication and any relevant conditions. This is special category data under UK GDPR. We collect it because some treatments are not safe for some people, and we cannot make that judgement without it.

The lawful basis is Article 6(1)(a) consent together with Article 9(2)(a) explicit consent. You can withdraw consent at any time, though we may then be unable to treat you.

Photographs

We may ask to take before-and-after photographs. Consent to photography for marketing is separate, optional, and never a condition of treatment — you can decline it and still be treated. Consent to clinical record photography is asked for separately. We do not tick either box for you.

When you buy something

Orders are taken by WooCommerce and paid through WooCommerce Payments and Stripe. Your name, delivery address, email and order details are processed there so we can fulfil the order. Card details are handled by the payment provider and we never see them. The lawful basis is performance of a contract.

If you choose to pay with Klarna, your name, contact details, delivery address and order details are shared with Klarna so it can offer and provide its payment options. Klarna uses that information under its own privacy notice, including to verify your identity and carry out credit checks. You can read how Klarna handles your information in its privacy notice. If you pay another way, nothing is shared with Klarna.

Cookies and analytics

This site sets one cookie of its own: a basket token, so your basket survives while you shop. It is httpOnly, meaning no script on the page can read it, and it expires after 48 hours.

We do not load analytics, advertising or social tracking without your agreement. If analytics is switched on in future, it will be behind a consent banner that is off by default.

Who we share it with

• Netlify — hosts this website and receives form submissions.
• WooCommerce Payments and Stripe — take payment for orders.
• Klarna — only if you choose to pay with Klarna. Klarna uses your information under its own privacy notice, including for identity and credit checks.
• Our email provider — carries email you send us.

We do not sell your information, and we do not share it for anyone else's marketing.

How long we keep it

Enquiries are kept for as long as needed to deal with them and a reasonable period afterwards. Order records are kept for six years, which is what HMRC requires. Treatment records and consent forms are kept for a period set by our insurer — this needs confirming before this policy is published.

Your rights

You can ask us for a copy of your information, ask us to correct it, ask us to delete it, object to how we use it, or withdraw consent. Contact us using the details above and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.