Privacy Policy
This privacy notice outlines our practices as a data controller regarding the acquisition, storage, and processing of personal data. Personal data refers to information that can identify you, such as your name, email address, payment details, and details related to your interactions with this website.
We are committed to processing your personal data fairly, lawfully, and transparently. This notice provides details about the personal data we collect, its intended use, and the purposes for which we will process it, including:
- Providing our services
- Improving our services
- Tailoring our marketing to be more relevant to you and your interests
- Meeting our legal responsibilities
We reserve the right to update this notice periodically, and any changes will be communicated to you. If you have additional questions beyond the information provided in this notice, feel free to contact us at info@drtoro.co.uk.
Your Rights & Our Commitment to You
Under data privacy legislation, you have several rights, and O Aesthetics Ltd. is dedicated to ensuring you can freely exercise these rights. Your rights include, under certain circumstances, the right to:
1. Be informed: You have the right to be informed about how your personal data is being processed.
2. Access, rectification, or erasure: You have the right to access the personal data we hold about you in our records. You are also entitled to have your personal data corrected if inaccurate, or to have it erased if we do not have a legitimate reason for retaining your data.
3. Request data portability: For personal data you provided to a controller, where processing was based on your consent, or where processing is done by automated means, you have the right to obtain a digital copy of your personal data, request its transfer to another company, or move your data from one IT system to another in a safe and secure way.
4. Request restriction of processing: You have the right to restrict the processing of your personal data when contesting its accuracy, objecting to processing, or when the processing is unlawful. If processing is restricted, we may need to retain sufficient information about you to ensure that the restriction is respected in the future.
5. Object to automated decision-making including profiling: You have the right not to be subject to any automated decision-making or profiling by us.
6. Withdraw consent: In cases where we rely on your consent for the processing of your personal data, you have the right to withdraw your consent at any time. For e-marketing, an unsubscribe (withdraw consent) option is included with every e-marketing communication we send.
7. Object to processing: If your personal data is processed based on the legitimate interests of a data controller or third party, you have the right to object to that processing.
8. Complain to the relevant supervisory authority: If you have concerns or complaints regarding how we process your data, contact us directly at info@drtoro.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO) in the UK. However, we appreciate the opportunity to address your concerns before involving the ICO.
Cookies Preferences: Manage cookies as you wish by visiting the Privacy Centre and clicking Manage Cookies. You can also adjust your web browser controls to manage cookies.
Personal Data We Collect
Personal data refers to any information about an individual from which that person can be identified, excluding anonymized data where identity and identifying information have been removed. Our website, designed for a general audience, does not knowingly collect data from children under the age of 16 or sell products to children. If you are under 16, you are not permitted to use or submit your data to the website.
Depending on your type and level of engagement with us, we may collect the following categories of personal data:
From the Services:
We receive and store information directly provided by our users. For instance, when setting up new users, we collect personal information like name and email address to provide them with the Services. Information collected from our customers may include personal details (e.g., name, date of birth, sex), contact information (e.g., email address, phone number, home address), payment details (e.g., bank account, credit card), and any other contact or information they choose to provide us in connection with the Services.
We may also collect special categories of personal data, also known as sensitive data, when customers use our Services through a questionnaire form before treatments. This may include medical history (e.g., current and previous doctor treatments, surgeries, pregnancies), skin conditions (e.g., current or previous skin conditions, allergies), use of medication (current or previous medication, creams used), and any other relevant health-related data customers choose to provide us.
From our Website:
We may collect any personal information you choose to send or provide to us, such as through our "Online Enquiry" form. If you contact us through the Website, we keep a record of our correspondence.
Information We Automatically Collect:
When you use our Services:
- Usage information: We track user activity related to the types of Services our customers and their users use, computer configurations, and performance metrics associated with their use of our Services.
- Log information: We log information about our customers and their users, including Internet Protocol (IP) addresses, when using our Services.
- Information collected by cookies and similar technologies: We use various technologies to collect information, including saving cookies to users’ computers.
- Customer Feedback: While using our Services, you may be asked to provide feedback, which is entirely optional.
When you use the Website:
- We collect certain information related to your device, such as its IP address, referring website, visited pages, and the time of your visit.
How We Collect Your Data
We obtain your personal data through various methods, including:
- When you visit our website: Information may be collected during your interactions with our website.
- When booking an appointment or treatment: Personal data is gathered when you schedule an appointment or seek a treatment with us.
- When you engage with us on social media: If you interact with us through social media platforms, we may collect relevant data.
- When you contact us with queries: Information is gathered when you reach out to us with inquiries or concerns.
- When you review our services: If you provide feedback or reviews about our services, we may collect and process that information.
- When you apply for an employment vacancy with O Aesthetics Ltd.: If you submit an application for employment opportunities within our company, we collect and process the relevant data from your application.
Data from Third Parties
In addition to the information collected directly from you, we may also receive personal data about you from various third parties. These sources include:
- Technical Data from third parties: This may include information from analytics providers, such as Google. Further details can be found in the section titled ‘Marketing preferences, adverts, and cookies’ below.
- Technical Data from affiliate networks: If you access our website through affiliate networks, we may receive Technical Data from these third-party networks.
- Identity and Contact Data from social media platforms: When you log in to our website using social media platforms, we may receive Identity and Contact Data from these platforms.
- Contact, Financial, and Transaction Data from service providers: Information from providers of technical, payment, and delivery services may include Contact, Financial, and Transaction Data.
How We Use Your Personal Data
The legal basis for processing your personal data:
We adhere to specific legal bases for collecting and processing your personal data. As a data controller, the legal justification for our collection and utilisation of your personal data depends on the manner and purpose for which it was collected. We only gather personal data under the following circumstances:
- Consent: We collect personal data with your explicit consent.
- Contractual Obligation: When your personal data is necessary to fulfil a contract with you, such as providing our data privacy software.
- Legitimate Interests: We may process personal data to pursue our legitimate business interests in a manner that you would reasonably expect, without significantly impacting your interests, rights, and freedoms. For example, displaying advertisements as you browse the internet.
- Legal Obligation: We collect or disclose personal data when we have a legal obligation to do so, such as in cases of suspected fraud, where we need to provide personal data to An Garda Siochana or a government body.
Reasons for processing your personal data include:
- Setting up a user account, booking an appointment, or treatment
- Providing, operating, and maintaining our services
- Processing and completing transactions, including sending related information, transaction confirmations, and invoices
- Managing our customers’ use of our services, responding to inquiries and comments, and providing customer service and support
- Sending customers technical alerts, updates, security notifications, and administrative communications
- Investigating and preventing fraudulent activities, unauthorised access to our services, and other illegal activities
- Any other purposes for which we notify customers and users
We use your personal information in these contexts based on the contract in place with you or our legitimate interest for security purposes (e.g., preventing and investigating fraudulent activities). Personal information will be deleted according to the terms of the contract.
How We Share Your Data
We share your personal data with trusted categories of third parties to conduct our business, providing services such as our privacy centre, managing feedback and complaints, and customising our services, advertising, marketing, competitions, and offers. Our trusted third-party categories include:
- Website hosts
- Cloud service providers
- Social media providers
- Professional services providers
- Customer survey service providers
- Advertising partners
As part of our e-marketing methods, based on legitimate business interests, we utilize some Google services and Facebook products. The practices are explained in the Google and Facebook terms and privacy notices. To protect your personal data, Google and Facebook automatically apply a hashing algorithm when sharing personal data. Please refer to their terms and privacy notices for more information.
How We Protect Your Data
We are committed to safeguarding your personal data and have implemented technical and organisational measures to prevent unauthorised access, loss, destruction, or damage. However, please note that transmitting information via the internet is not entirely secure. Although we will take appropriate measures to protect your data, we cannot guarantee the security of data transmitted to our site; any transmission is at your own risk.
Transfers of Your Data
We do not transfer your personal data outside of the UK/EEA (European Economic Area) unless you are based outside the UK/EEA, or it is required to provide the Services. If such transfers occur, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
Our Data Retention Practices
We retain your personal data only as long as necessary for the purposes for which it was collected and processed, including to comply with legal, regulatory, accounting, or reporting requirements. The retention period may vary depending on the type of data and the specific circumstances under which it was collected. Upon expiration of the retention period, we will securely delete or anonymize your personal data.
Minors
Our site is not intended for individuals under the age of 18.
Marketing Preferences, Adverts, and Cookies
We use cookies to provide you with a better, more personalised service, including monitoring the performance of our website and delivering relevant advertising. You have the right to manage your cookies preferences and can do so by visiting the Privacy Centre and clicking Manage Cookies, or by adjusting your web browser controls.
Contact Us
If you have any questions or concerns about this privacy notice or our data protection practices, please contact us at:
Email: info@drtoro.co.uk