​Effective Date: January 2025
 

1. Introduction

HeadStrong Clinic ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy outlines how we collect, use, store, and share your personal data when you visit our website, use our services, or interact with us.

​

2. Who We Are

HeadStrong Clinic is a UK-based provider of advanced aesthetic treatments, including scalp micropigmentation (SMP), laser treatments, and skin rejuvenation services. Our clinic is registered and operates in accordance with UK law and data protection regulations.
 

3. What Information We Collect

We may collect and process the following personal data:

• Contact Information: Name, email address, phone number, address.

• Health & Medical Information: Relevant health history to determine treatment suitability.

• Appointment Details: Treatment type, consultation notes, booking preferences.

• Payment Information: Billing address and transaction details (handled securely via third-party providers).

• Digital Information: IP address, browser type, and cookies via our website.
   

4. How We Use Your Information

We use your information to:

• Book and manage appointments

• Provide aesthetic and medical-grade treatments

• Send appointment reminders and aftercare guidance

• Process payments and refunds

• Respond to enquiries and client support requests

• Improve our services and website performance

• Comply with legal or regulatory obligations
   

5. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Your consent (for marketing and communications)

• Performance of a contract (for treatment bookings and delivery)

• Legal obligations (such as tax or regulatory reporting)

• Our legitimate interests (to improve client care and service efficiency)

6. Sharing Your Data

We do not sell or rent your personal data. We may share it with:

• Third-party providers who assist in service delivery (e.g. booking systems, payment processors, secure medical records platforms)

• Regulatory or law enforcement bodies when required by law

7. How We Store & Protect Your Data

Your data is securely stored on password-protected systems and encrypted platforms. Access is limited to authorised staff only. We retain personal data only as long as necessary for treatment purposes or legal requirements.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your data (where legally permissible)

• Withdraw consent at any time (e.g. for marketing)

• Lodge a complaint with the ICO (Information Commissioner’s Office)
   

9. Cookies & Tracking

Our website uses cookies to personalise your experience and analyse traffic. You can manage cookie settings in your browser at any time.
 

10. Marketing Preferences

With your permission, we may send you occasional updates about new treatments, events, or promotions. You can unsubscribe at any time by clicking the link in any email.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on our website with an updated effective date.
 

12. Contact Us

If you have any questions about this policy or how we handle your data, please contact:

HeadStrong Clinic: 117 Promenade, Cheltenham, GL50 1NW
Email: hello@headstrongclinic.co.uk 
Phone: 01242 374675