Privacy policy

This policy explains how Injecta Glam collects, uses and protects your personal information when you visit our website, book a treatment or get in touch. Because we handle health information, we take extra care with it.

1. Who we are

Injecta Glam is run by Alexandra Webb, a sole trader, based in Crawley, West Sussex. For the purposes of UK data protection law, we are the data controller for the personal information described in this policy. You can contact us at injectaglam1@outlook.com.

2. The information we collect

• Contact and booking details: your name, email address, phone number, and the treatments and times you book.
• Health information: your medical history, medications, allergies, pregnancy or breastfeeding status, and notes from your consultation and treatment. This is special category data, and we only collect what we need to treat you safely.
• Payment information: we don't store full card details. Deposits and payments are taken through our booking platform.
• Photos: before and after photos, only with your separate written consent.
• Messages and enquiries: anything you send us by email, Instagram or through this website.
• Technical information: basic details such as the page you visited and your device type when you use our website. See our Cookies Policy for more.

3. How we use your information and why

We only use your information for the purposes below, and each one has a legal basis.

• To take and manage your booking, and to keep you safe during treatment. Basis: contract, and for health information, the provision of health care.
• To keep accurate treatment records, as good clinical practice requires. Basis: legal obligation and provision of health care.
• To send booking confirmations, reminders and aftercare advice. Basis: contract and legitimate interests.
• To reply to your messages and enquiries. Basis: legitimate interests.
• To use before and after photos. Basis: your consent only. You can withdraw consent at any time.
• To send news and offers, and to ask for reviews, if you've opted in. Basis: consent. You can unsubscribe at any time.
• To keep our website secure and working properly. Basis: legitimate interests.

4. Our booking platform

We use HeyGoldie to manage bookings, deposits, reminders and client forms. HeyGoldie processes the information you give when you book, and handles it under its own privacy policy, available at heygoldie.com/privacy-policy. When you select "Book now", you leave this website and move to HeyGoldie's booking page.

5. Who we share your information with

We only share your information where it's needed:

• HeyGoldie, to manage bookings, deposits and reminders.
• Our email and accounting providers, to run the business.
• Our professional indemnity insurer, where needed in connection with your treatment.
• Regulators or authorities, if the law requires it.
• Service providers that run this website (see our Cookies Policy).

We don't sell your information, and we don't share it for advertising.

6. Where your information is stored

Some of the services we use, including HeyGoldie and our email provider, may store or process information outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, as UK data protection law requires.

7. How long we keep your information

We keep treatment and health records for 6 years after your last treatment, or longer where the law or our insurer requires it. Enquiries and messages are kept for 12 months. Photos are only kept while your consent is in place, and are removed if you withdraw it.

8. How we protect your information

We limit access to your information to the people who need it, use secure services, and keep our devices protected. No system is completely secure, so if you think something has gone wrong with your information, please tell us straight away.

9. Your rights

Under UK data protection law, you have the right to:

• access the information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to erase your information, where the law allows (treatment records may need to be kept for a period);
• ask us to restrict how we use your information;
• receive your information in a portable format;
• object to certain uses of your information;
• withdraw your consent at any time, for example for photos or marketing.

To use any of these rights, email us at injectaglam1@outlook.com. We'll respond within one month.

10. Complaints

Please contact us first, so we have the chance to put things right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

11. Children

Our treatments are for adults only. We don't knowingly collect information from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, and the date at the top shows when it was last changed.