Who We Are
Veriderm Aesthetics and Laser is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR).
What Data We Collect
- Personal identifiers: Name, DOB, email, phone, address
- Medical data: Treatment history, health conditions, allergies, medical history
- Financial data: Payment method, transaction history
- Website usage: IP address, cookies, user activity
Why We Process Your Data
- To provide and manage treatments (contractual necessity)
- To comply with legal and regulatory obligations (legal requirement)
- For marketing, with consent (opt-in required)
- To improve clinic services (legitimate interest)
Data Sharing
- We may share data with cloud-based systems, secure email, or practice management providers.
- No personal data is sold or transferred internationally.
Data Retention
- Medical records: 10 years (or until age 25 for minors)
- Financial records: 6 years for HMRC compliance
- Contact details for marketing: until consent is withdrawn
Your Rights
- Right to access, correct, or erase your data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with the ICO
Data Security
- SSL encryption, password protection, and access controls are enforced
- Staff receive regular data protection training
- Breach response protocols are in place
Cookies
- Our site uses essential, performance, and analytics cookies
- Cookie preferences can be managed via your browser or our banner
Contact Us
For privacy-related queries: info@veridermgroup.com