Privacy Policy

Last updated: 30 September 2026

Harley Street Specialists Limited ("Harley Street TRT & HRT", "we", "us" or "our") is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit or interact with harleystreettrthrtclinic.com (the "Site"), including when you submit an enquiry through our website.

Harley Street Specialists Limited is the data controller responsible for personal data collected through or in connection with the Site.

Data Controller
Harley Street Specialists Limited
121 Crawford Street
London
W1U 6BE
United Kingdom

Email: info@harleystreettrthrtclinic.com
Telephone: 0207 935 1127

What Personal Data Do We Collect?

We may collect personal information that you provide to us directly when you interact with the Site or contact us.

Depending on how you use the Site, this may include:

Your first and last name.
Your email address.
Your telephone number.
The type and nature of your enquiry.
Information contained in messages or other communications that you voluntarily provide to us.
Information relating to a clinic or organisation and the name and contact details of a practitioner when you submit a Clinical Network enquiry.
Business information that you provide through a Clinical Network enquiry, such as the turnover category selected on the form.
Information relating to your communications, enquiries, feedback or complaints.
Technical information collected automatically when you use the Site, such as your browser type, device information, IP address and information about how you interact with the Site, where applicable.
Information collected through cookies and similar technologies, where applicable.

Health Information

Because we provide healthcare-related services, individuals may voluntarily provide information concerning their health when communicating with us.

Information concerning a person's health is treated as special category personal data under UK data protection law and receives additional protection. The UK GDPR requires both an Article 6 lawful basis and a separate Article 9 condition where special category data is processed.

Our general website enquiry forms are not intended to be a secure clinical record or a substitute for an appropriate clinical communication channel.

Please do not include detailed medical information, test results, medication details or other sensitive health information in a general website enquiry unless we specifically ask you to provide it.

Where health information is voluntarily provided, we will only process it where there is an appropriate lawful basis and, where required, an applicable condition for processing special category data.

How Do We Use Your Personal Data?

We may use personal data for the following purposes:

To receive, review and respond to enquiries submitted through the Site.
To contact you regarding an enquiry or request that you have submitted.
To communicate with you regarding appointments, consultations, services or other matters you have requested.
To provide and administer services you request from us.
To communicate with practitioners, clinics or other relevant organisations where this is necessary to respond to an enquiry.
To maintain the security, functionality and performance of the Site.
To prevent, detect and investigate fraud, misuse, security incidents or other unlawful activity.
To maintain appropriate business, administrative and operational records.
To comply with legal, regulatory and professional obligations.
To establish, exercise or defend legal claims and protect our rights and legitimate business interests.
Where you voluntarily provide health-related information, we will process that information only for appropriate and lawful purposes connected with your enquiry, healthcare services or other services you have requested, subject to the additional requirements that apply to special category data.

Legal Basis for Processing

We will only process personal data where we have an appropriate lawful basis under applicable UK data protection law.

Depending on the circumstances, the lawful basis may include:

Legitimate Interests

We may process personal data where this is necessary for our legitimate interests, such as responding to enquiries, administering our business, maintaining website security, preventing misuse and protecting our rights, provided that those interests are not overridden by your rights and interests.

Contractual Necessity

Where applicable, we may process personal data where this is necessary to take steps at your request before entering into a contract or to perform a contract with you.

Consent

Where we rely on consent as the lawful basis for a particular processing activity, we will ask for consent where appropriate and explain the purpose for which it is being requested.

Where consent is relied upon, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Legal and Regulatory Obligations

We may process personal data where necessary to comply with applicable legal, regulatory, professional or other obligations.

Special Category Data

Where health information or other special category data is processed, we will identify and document both an Article 6 lawful basis and an applicable Article 9 condition before undertaking the relevant processing, where required.

The specific lawful basis and special-category condition may depend on the circumstances and purpose of the processing.

Website Enquiries and Email Processing

When you submit an enquiry through one of our website forms, the information you provide is transmitted to our website's server-side application and used to generate an email notification for the clinic.

We use Resend as an email delivery service to send these enquiry notifications.

Information submitted through an enquiry form may therefore be processed by Resend on our behalf. This may include your name, contact details and the contents of your enquiry.

The enquiry notification is sent to the relevant Harley Street TRT & HRT email address.

We do not use the website enquiry forms to create an online patient account or clinical record.

Resend states that its services support GDPR compliance and provides contractual data-processing terms. Resend also states that email and log data is retained for 30 days on its Free, Pro and Scale plans while an account remains active.

The clinic should ensure that its account configuration and contractual arrangements with Resend remain consistent with its data protection obligations.

Who Do We Share Your Personal Data With?

We may share personal data where necessary for legitimate and lawful purposes.

Depending on the circumstances, recipients may include:

Resend, our email delivery provider, where necessary to deliver website enquiry notifications.
Website hosting, infrastructure and technology providers used to operate and secure the Site.
Professional, legal, regulatory or other advisers where appropriate.
Service providers supporting security, fraud prevention or website operations.
Law enforcement agencies, regulators, governmental authorities or other bodies where disclosure is required or permitted by law.
A purchaser, successor or other relevant party where all or part of our business or assets are transferred or reorganised.
Other parties where you have provided appropriate consent or disclosure is otherwise permitted or required by law.
Where third-party service providers process personal data on our behalf, we take appropriate steps to ensure that suitable contractual, technical and organisational safeguards are in place.

International Transfers

Some service providers used to operate the Site or process enquiries may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK and the transfer is subject to the UK international-transfer rules, we will use an appropriate transfer mechanism and safeguards as required by applicable UK data protection law.

For example, Resend states that it supports international transfers using mechanisms including the EU-U.S. Data Privacy Framework and its UK Extension, as well as Standard Contractual Clauses.

Where required, information about applicable transfer safeguards can be obtained by contacting us using the details provided in this Privacy Policy.

How Long Do We Keep Your Personal Data?

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet applicable legal, regulatory, professional, accounting or reporting requirements.

The retention period depends on the nature of the information, why it was collected and our relationship with you.

For website enquiries, information will generally be retained for as long as reasonably necessary to manage and respond to the enquiry and for any associated record-keeping, legal or regulatory purposes.

Clinical and healthcare records, where applicable, may be subject to different retention requirements.

Where information is no longer required, we will take reasonable steps to securely delete or anonymise it.

Third-party providers may have their own defined retention periods. For example, Resend currently states that email and log data is retained for 30 days on its Free, Pro and Scale plans while the account remains active.

Data Security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure or destruction.

The Site uses secure communication technologies, including HTTPS, to protect information transmitted between your browser and the website.

Access to services used to process personal data is restricted to authorised individuals and systems where appropriate.

Our email service provider also applies its own security measures to the information processed through its service.

However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. While we take appropriate measures to protect personal data, we cannot guarantee the absolute security of information transmitted to or through the Site.

Cookies and Similar Technologies

The Site may use cookies and similar technologies for essential functionality, security, performance, analytics or other purposes.

Where consent is required for non-essential cookies or similar technologies, we will provide appropriate information and obtain consent in accordance with applicable law.

You may manage available cookie preferences through the options provided on the Site and may also control certain cookies through your browser settings.

Please refer to our Cookie Policy for further information about the cookies and similar technologies used by the Site and how you can manage your preferences.

Marketing Communications

We may contact you about our services or other relevant communications where this is permitted by applicable law.

Where consent is required for marketing communications, we will only send those communications where you have provided the necessary consent.

You can opt out of marketing communications at any time by following the unsubscribe instructions included in a marketing communication or by contacting us directly.

Opting out of marketing communications does not prevent us from sending essential service-related or administrative communications that are necessary to respond to an enquiry or provide a service you have requested.

Children

The Site is intended for individuals aged 18 and over.

We do not knowingly collect personal data from children under the age of 18 through the Site.

If you believe that a child has provided personal information to us, please contact us using the details provided in this Privacy Policy so that we can take appropriate action.

Your Privacy Rights

Depending on the circumstances and the applicable lawful basis, you may have rights under UK data protection law, including:

The right to request access to personal data we hold about you.
The right to request correction of inaccurate or incomplete personal data.
The right to request deletion of your personal data in certain circumstances.
The right to request restriction of processing in certain circumstances.
The right to object to certain processing, including processing based on legitimate interests and direct marketing.
The right to withdraw consent where we rely on consent as our lawful basis.
The right to data portability in circumstances where this right applies.
These rights are subject to certain legal conditions and exemptions, meaning that they may not apply in every circumstance.

If you wish to exercise a right or have a question or concern about how we process your personal data, please contact:

Email: info@harleystreettrthrtclinic.com
Address: Harley Street Specialists Limited, 121 Crawford Street, London, W1U 6BE, United Kingdom

We may need to verify your identity before responding to certain requests.

You also have the right to complain to the Information Commissioner's Office (ICO) if you believe your personal data has been handled unlawfully or your data protection rights have not been respected.

You can find information about the ICO and how to raise a concern on its website.

Automated Decision-Making and Profiling

We do not use personal data collected through the website enquiry forms to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, data-processing activities or applicable legal requirements.

Any updated version will be published on this page with an updated "Last updated" date.

We recommend reviewing this Privacy Policy periodically to remain informed about how we collect, use and protect personal information.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact us:

Harley Street Specialists Limited
121 Crawford Street
London
W1U 6BE
United Kingdom