Privacy Policy
Harley Street TRT & HRT is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what personal information we may collect, how we use it, how we protect it, and the rights you may have in relation to your information.
Harley Street Specialists Limited ("Harley Street TRT & HRT", "we", "us" or "our") is the data controller responsible for personal data collected through or in connection with harleystreettrthrtclinic.com and any associated applications or digital services (collectively, the "Site").
What Personal Data Do We Collect?
We may collect personal information when you provide it to us directly or when you interact with or use our Site. Depending on how you use our services, this may include:
- Your name and contact details, together with information you provide when creating or managing an account or submitting an enquiry.
- Information relating to your interactions with us, including communications with our team, enquiries, feedback, or complaints.
- Information you provide when participating in surveys, consultations, or other activities offered through the Site.
- Information collected automatically when you use the Site, including the pages you visit, links you interact with, your device information, browser information, and certain usage data.
- Information collected through cookies and similar technologies, where applicable.
- Location information where you have provided the necessary permission or where collection is otherwise permitted by law.
- Where relevant to the services you request, information concerning your health or other sensitive personal information that you voluntarily provide to us.
We recognise that certain information, particularly information relating to your health, may be considered sensitive or special category personal data under applicable data protection legislation. We will handle such information with appropriate care and only process it where there is a lawful basis for doing so.
How Do We Use Your Personal Data?
Depending on your relationship with us, how you interact with the Site, and the permissions you provide, we may use your personal data for purposes including:
- To respond to enquiries, requests, and communications submitted through the Site.
- To provide, administer, and manage the services you request from us.
- To communicate with you regarding appointments, consultations, services, or other relevant matters.
- To maintain and administer your account, where applicable.
- To improve, maintain, and monitor the performance, functionality, security, and usability of the Site.
- To understand how users interact with our Site and improve the information and services we provide.
- To communicate with you about our services, where we have your consent or are otherwise permitted to do so.
- To maintain the security of our Site and systems and to detect, prevent, or investigate fraud, misuse, or other unlawful activity.
- To comply with our legal, regulatory, professional, and other applicable obligations.
- To protect our rights, property, and legitimate business interests, and those of our patients, users, staff, and other relevant third parties.
Where you voluntarily provide health-related or other sensitive information, we will only use that information for appropriate and lawful purposes connected with the services or support you have requested, subject to applicable data protection requirements.
Legal Basis for Processing
We process personal data only where there is an appropriate legal basis under applicable data protection legislation. Depending on the circumstances, this may include:
- Performance of a contract: where processing is necessary to provide a service to you, fulfil an agreement, or take steps at your request before entering into an agreement.
- Consent: where you have given us permission to process your personal data for a specific purpose.
- Legitimate interests: where processing is necessary for our legitimate business, operational, security, or administrative interests, provided those interests are not overridden by your rights and interests.
- Legal and regulatory obligations: where processing is necessary for us to comply with applicable laws, regulations, professional requirements, or lawful requests from relevant authorities.
Where we process special category data, including health information, we will rely on an additional lawful condition where required by applicable data protection legislation.
Marketing Communications
Where permitted by law and in accordance with your preferences, we may use your personal information to communicate with you about Harley Street TRT & HRT, our services, updates, educational information, or other relevant communications.
Where marketing communications require your consent, we will only send them where you have provided that consent. You may withdraw your consent or change your communication preferences at any time.
You can opt out of marketing communications by following the unsubscribe instructions included in our emails or by contacting us directly using the contact details provided on the Site.
Please note that opting out of marketing communications does not prevent us from sending essential service-related or administrative communications where these are necessary, such as information relating to an enquiry, appointment, account, or service you have requested.
Cookies and Similar Technologies
Our Site may use cookies and similar technologies to provide essential functionality, understand how the Site is used, improve performance, and, where applicable, support analytics or marketing activities.
You can manage or adjust your cookie preferences through the options provided on the Site or through your browser settings.
Please refer to our Cookie Policy for further information about the cookies and similar technologies we use and how you can manage your preferences.
Who Do We Share Your Personal Data With?
We may share personal data with carefully selected third parties where necessary for legitimate and lawful purposes. These may include:
- Service providers and technology partners who assist us in operating, maintaining, and securing the Site and our services.
- Professional, legal, regulatory, and other advisers where appropriate.
- Third parties involved in fraud prevention, detection, security, or risk management.
- Law enforcement agencies, regulators, governmental bodies, or other authorities where we are legally required or permitted to do so.
- A potential purchaser or successor in the event that all or part of our business or assets are sold, transferred, or reorganised.
- Other parties where you have provided your consent or where disclosure is otherwise permitted or required by law.
Where we use third-party service providers to process personal data on our behalf, we take reasonable steps to ensure that appropriate contractual, technical, and organisational safeguards are in place.
International Transfers, Storage and Retention
Some of the service providers we use may operate or process personal data outside the United Kingdom or European Economic Area. Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and that your personal data receives an appropriate level of protection in accordance with applicable data protection legislation.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, regulatory, accounting, professional, or reporting requirements.
The length of time we retain information will depend on the nature of the information and our relationship with you. For example, certain records may need to be retained for specified periods to meet legal or regulatory obligations.
When personal data is no longer required, we will take reasonable steps to securely delete or anonymise it.
Where you have withdrawn consent to receive marketing communications, we may retain limited information necessary to ensure that your marketing preferences are respected.
Data Security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration, disclosure, or destruction.
Where appropriate, information transmitted through the Site is protected using encryption and secure communication technologies. We also take reasonable steps to ensure that payment and other sensitive information is handled securely where such information is processed through our Site or service providers.
However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure. While we take appropriate measures to protect your personal data, we cannot guarantee the absolute security of information transmitted to or through the Site.
Children
Our Site is intended for individuals aged 18 and over and is not directed towards children under the age of 18.
We do not knowingly collect personal data from children under the age of 18. If you believe that a child has provided personal information to us, please contact us so that we can take appropriate action.
Your Privacy Rights
Depending on your circumstances and the applicable data protection legislation, you may have certain rights in relation to your personal data. These may include:
- The right to request access to the personal data we hold about you.
- The right to request that inaccurate or incomplete personal data is corrected.
- The right to request deletion of your personal data in certain circumstances.
- The right to request restriction of processing in certain circumstances.
- The right to object to certain types of processing, including direct marketing.
- The right to withdraw consent where we rely on consent as the legal basis for processing.
- The right to request the transfer of certain personal data to another organisation in a commonly used and machine-readable format, where applicable.
These rights are subject to certain legal conditions and exemptions, meaning that there may be circumstances in which we are legally permitted or required to retain or process information despite a request.
If you wish to exercise any of your rights, or if you have questions or concerns about how we process your personal data, please contact us using the contact details provided on the Site.
You may also have the right to raise a concern with the relevant data protection supervisory authority in your jurisdiction.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or data processing practices.
Any updated version will be published on this page. We recommend reviewing this Privacy Policy periodically to remain informed about how we collect, use, and protect your personal information.