How we use your information
Priors Medical (Essex) Limited, trading as DrMediSpa, is the data controller for the information you provide on this form. We are registered in England, company number 12525179.
We collect your contact details, skin photograph, and health information in order to provide you with a remote skin consultation and personalised recommendations.
Lawful basis for processing
We process your personal data on the basis of your consent (Article 6(1)(a) UK GDPR).
Where you provide health information or photographs, this constitutes special category data, which we process with your explicit consent (Article 9(2)(a) UK GDPR).
You may withdraw your consent at any time by contacting us using the details below. This will not affect the lawfulness of processing carried out before withdrawal.
How your data is used and shared
Your information will only be used to assess your skin concerns and provide you with a consultation response.
Your data may be processed by trusted service providers who support our operations (such as secure email and website hosting providers). These providers act as data processors and only process your data on our instructions.
We do not sell your data or share it with third parties for marketing purposes.
How long we keep your data
We retain your information for 6 months after your consultation, unless a longer retention period is required by law or for legitimate clinical or legal purposes.
If you choose to proceed with treatment and become a patient of DrMediSpa, your information will be added to your patient record and retained in accordance with our clinical record-keeping policies.
After the relevant retention period has expired, your data will be securely deleted or anonymised.
How we protect your data
We take appropriate technical and organisational measures to protect your personal data, including secure systems, restricted access, and encryption where appropriate.
Your rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Withdraw your consent at any time
- Lodge a complaint with the Information Commissioner’s Office (ICO)
Please note that where your data forms part of a medical record, we may be required to retain certain information in accordance with legal and regulatory obligations. In these circumstances, your right to deletion may be limited.
To exercise your rights, contact:
Dr Munir Somji
8 Forest Road, Loughton, IG10 1DX
hello@drmedispa.com
For full details of how we collect, use, and protect your personal data, please read our
privacy policy
Automated decision-making
We do not use automated decision-making or profiling in relation to your data. All consultations are reviewed by a qualified professional.
