Your information.

Who is responsible

Jodie Gordon, practising as The Prescribing Suite at Banana Beauty Lab, 343 Fulham Palace Road, London SW6 6TD, is the data controller for personal information collected through this website and in the course of your care. Contact for anything in this notice: jodiegordon66@btinternet.com or 07769 906622.

What we collect and why

• Booking enquiries (this website, phone, email)Name, email, phone, consultation type, preferred times and your message. Used to reply to you and arrange an appointment.
• Patient recordsIdentity and contact details, date of birth, GP details, medical history, medications, allergies, consultation notes, assessment findings, consent forms, prescriptions, treatment records, aftercare and follow-up notes. Used to provide safe care and meet professional record-keeping duties.
• Clinical photographsTaken with your consent as part of your record to document assessment and outcomes. Never used for marketing without separate written consent.
• PaymentsAmount, date and method. Card details are handled by the payment provider; we do not store full card numbers.
• Correspondence and feedbackEmails, messages and any complaint, kept with your record where relevant.
• Website useStandard server logs (IP address, browser, pages requested) kept by our hosting provider for security. We do not use analytics or advertising cookies; see the cookie policy.

Our lawful bases

Under UK GDPR we rely on the following:

• Contract (Article 6(1)(b)): to respond to your enquiry and provide the consultation or treatment you have booked.
• Legal obligation (Article 6(1)(c)): record-keeping, prescribing and reporting duties under NMC standards and the law.
• Legitimate interests (Article 6(1)(f)): running the practice safely, handling complaints, keeping the website secure.
• Health information is special category data. We process it for the provision of health care by a registered health professional bound by a duty of confidentiality (Article 9(2)(h) and Data Protection Act 2018, Schedule 1, Part 1), and with your explicit consent for clinical photographs and for any use beyond your direct care.
• Marketing: only with your separate opt-in consent, which you can withdraw at any time. We do not send marketing by default.

Where your information comes from

Almost all of it comes from you. With your agreement we may also receive information from your GP or another clinician involved in your care, or from Banana Beauty Lab if you are already a client there.

Who we share it with

• The clinic's secure patient-forms and records system, used to collect your medical history and consent and to store your record.
• Pharmacy, where a prescription is issued, to the extent needed to dispense it.
• Your GP or other health professionals, with your agreement, or without it only where there is a legal duty or a serious risk to you or others.
• Our service providers: website and email hosting, the booking-request mail handler, and payment processing. They act on our instructions under contract and may not use your data for their own purposes.
• Insurers, regulators or legal advisers where required to handle a complaint, claim or regulatory matter.

We do not sell your information. Information is stored in the UK or in countries with equivalent protections; where a provider stores data outside the UK, appropriate safeguards such as the UK International Data Transfer Agreement are in place.

How long we keep it

• Clinical records, including photographs and consentMinimum 10 years from your last treatment, in line with professional guidance for cosmetic procedures; longer where required for a claim or by law
• Booking enquiries that do not become appointmentsDeleted after 12 months
• Financial records7 years, as required by HMRC
• Complaints10 years from closure
• Server logsUp to 90 days

When records are no longer needed they are securely deleted or destroyed.

How we protect it

Records are held in password-protected, encrypted systems with access limited to Jodie and, where needed, authorised staff bound by confidentiality. Paper is kept to a minimum and stored locked. Health information is never collected through this website or by ordinary email; the booking form asks for contact details only.

Your rights

You have the right to:

• be told how your information is used (this notice);
• access a copy of the information we hold about you;
• have inaccurate information corrected;
• ask for information to be deleted, where we no longer have a reason to keep it (this does not usually apply to clinical records, which we must retain);
• ask us to restrict or object to certain processing;
• withdraw consent at any time where consent is the basis, for example for photographs or marketing;
• receive your information in a portable format where processing is based on contract or consent.

To exercise any right, email jodiegordon66@btinternet.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

Complaints about data

Please raise any concern with us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow SK9 5AF.

Children

The practice treats adults aged 18 and over only and does not knowingly collect information about children.

Changes to this notice

We review this notice at least every 12 months and whenever our practices change. The date at the top shows the current version.

Cookie policy   ·   Patient & booking terms   ·   Complaints