Privacy Policy

Lamure Clinics ("we", "us", "our") is committed to protecting your privacy and handling your personal and health information responsibly, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information we collect, why, and what rights you have over it.

1. Who we are

Lamure Clinics, 81 Lower Sloane Street, London SW1W 8DA, is a trading name of Best Health International Ltd (company number 14609437, registered office 569 Finchley Road, London NW3 7BN), which is the data controller for the personal information described in this policy. [ICO registration number to be confirmed.] For any privacy query, contact us at info@lamureclinics.com or +44 20 8143 6200.

2. Information we collect

• Booking and contact details — name, email address, phone number, and the treatment, practitioner and appointment time you select.
• Enquiries — the details and message you send through our contact, room hire or report-a-bug forms.
• Membership details — if you join a membership plan: your name, email address, phone number, chosen plan, and membership and payment status.
• Health and treatment information — details you share with us before or during a consultation, relevant to assessing suitability for treatment.
• Payment information — booking fees, treatment invoices and membership payments are processed by Stripe. We see whether a payment succeeded and its amount, but we do not receive or store your card details.
• Technical information — anonymous, aggregated website usage data collected via privacy-focused analytics, and the browser signals our spam protection uses to tell people apart from automated bots (see our Cookie Policy).

3. How we use your information

• To manage your booking, send confirmation and reminder communications, and process cancellations or refunds.
• To set up and administer a membership, take monthly membership payments, and send membership-related emails.
• To issue invoices for treatment and record payments.
• To provide safe, appropriate clinical care, and to keep accurate treatment records as required of a healthcare provider.
• To respond to enquiries sent through this website, and to protect our forms from spam and abuse.
• To meet our legal, regulatory and insurance obligations.

4. Legal basis for processing

We process contact and booking details on the basis of contract (to provide the service you've booked) and legitimate interest (responding to enquiries). Health information is "special category data" under UK GDPR, which we process on the basis of your explicit consent and for the purposes of healthcare provision, consistent with our professional and regulatory obligations. [To be reviewed and finalised against the clinic's CQC registration position and clinical governance policies once confirmed.]

5. Who we share information with

We use a small number of trusted service providers to run this website and our booking and membership systems, each acting under their own data processing terms:

• Stripe — processing booking fees, treatment invoices and monthly membership payments.
• Supabase — secure database hosting for booking and membership records, hosted in London, United Kingdom.
• Vercel — website hosting and privacy-focused, cookie-free website analytics.
• Google — our clinic email (Google Workspace), appointment calendars for our practitioners, and the map shown on our contact and room hire pages.
• Resend — sending booking, cancellation, membership and enquiry emails.
• Cloudflare — the Turnstile spam check on our contact, room hire and report-a-bug forms.

Some of these providers may process information outside the United Kingdom. Where they do, the transfer is protected by safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK-US Data Bridge.

We do not sell your personal information, and we do not use it for advertising. We may share information with regulatory or legal authorities where required by law.

6. Data retention

We retain booking and clinical records for as long as required by applicable healthcare record-keeping regulations and our insurers, and no longer than necessary. [Specific retention periods to be confirmed against clinical governance policy.]

7. Your rights

Under UK GDPR you have the right to access, correct, or request erasure of your personal data, to restrict or object to certain processing, and to data portability. You can also complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled. To exercise any of these rights, contact us at info@lamureclinics.com.

8. Cookies

Details of what (if anything) this website stores in your browser are set out in our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent revision.