Legal

Privacy Policy

Last updated: [date to be confirmed on publication]

Draft for review. This page is a boilerplate starting point prepared ahead of the site's launch. It has not been reviewed by a solicitor and must not be relied on as final legal, regulatory or clinical governance content. Please review and confirm all bracketed [placeholders] before this page is published or linked from anywhere patients can reach it.

Lamure Clinics ("we", "us", "our") is committed to protecting your privacy and handling your personal and health information responsibly, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what information we collect, why, and what rights you have over it.

1. Who we are

Lamure Clinics, 81 Lower Sloane Street, London SW1W 8DA. [Data controller / company registration details to be confirmed.] For any privacy query, contact us at info@lamureclinics.com or +44 20 8143 6200.

2. Information we collect

Booking and contact details — name, email address, phone number, and the treatment and appointment time you select.
Health and treatment information — details you share with us before or during a consultation, relevant to assessing suitability for treatment.
Payment information — booking fees are processed by Stripe; we do not receive or store your card details.
Technical information — anonymous, aggregated website usage data collected via privacy-focused analytics (see our Cookie Policy).

3. How we use your information

To manage your booking, send confirmation and reminder communications, and process cancellations or refunds.
To provide safe, appropriate clinical care, and to keep accurate treatment records as required of a healthcare provider.
To respond to enquiries sent through this website.
To meet our legal, regulatory and insurance obligations.

4. Legal basis for processing

We process contact and booking details on the basis of contract (to provide the service you've booked) and legitimate interest (responding to enquiries). Health information is "special category data" under UK GDPR, which we process on the basis of your explicit consent and for the purposes of healthcare provision, consistent with our professional and regulatory obligations. [To be reviewed and finalised against the clinic's CQC registration position and clinical governance policies once confirmed.]

5. Who we share information with

We use a small number of trusted service providers to run the booking system, each acting under their own data processing terms:

Stripe — payment processing.
Supabase — secure database hosting for booking records.
Google — calendar scheduling for practitioners.
Resend — sending booking confirmation and cancellation emails.

We do not sell your personal information. We may share information with regulatory or legal authorities where required by law.

6. Data retention

We retain booking and clinical records for as long as required by applicable healthcare record-keeping regulations and our insurers, and no longer than necessary. [Specific retention periods to be confirmed against clinical governance policy.]

7. Your rights

Under UK GDPR you have the right to access, correct, or request erasure of your personal data, to restrict or object to certain processing, and to data portability. You can also complain to the Information Commissioner's Office (ico.org.uk) if you believe your data has been mishandled. To exercise any of these rights, contact us at info@lamureclinics.com.

8. Cookies

Details of what (if anything) this website stores in your browser are set out in our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent revision.