Vittarra Clinic Privacy Policy
Last updated: 22 September 2025
At Vittarra Clinic, we are committed to protecting your privacy and handling your personal information with the highest standards of confidentiality and care. This policy explains how we collect, use, store, and protect your information when you interact with our clinic, whether as a patient, website visitor, or enquiry.
1. Who We Are
Vittarra Clinic provides medical aesthetics, regenerative medicine, and longevity-focused healthcare services. We are registered with the Care Quality Commission (CQC) and adhere to all UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller: Vittarra Medical Wellness & Aesthetic Clinic Ltd
Contact: admin@vittarraclinic.uk
2. What Information We Collect
We may collect and process the following types of information:
- Personal details: name, date of birth, address, contact details.
- Medical information: health history, treatment notes, photographs (if relevant to care).
- Appointment and payment details: booking history, payment records, finance applications.
- Digital information: IP address, browser type, cookies when you use our website.
- Communication records: enquiries, emails, and correspondence with our team.
3. How We Use Your Information
We use your information to:
- Deliver safe and effective medical care.
- Maintain accurate medical records.
- Arrange consultations, treatments, and follow-up care.
- Process payments and finance applications.
- Communicate with you about your appointments and care.
- Share important updates about our services (only with your consent).
- Comply with legal, regulatory, and clinical obligations.
We will only process your information when we have a lawful basis, such as your consent, legitimate interest, or a legal requirement.
4. Sharing Your Information
We do not sell your data. We may share your information only with:
- Regulated healthcare professionals involved in your care.
- Approved third-party providers (e.g., laboratories, payment providers, finance companies).
- Regulatory bodies if required by law (e.g., CQC, GMC, NMC).
- IT and administrative support partners who ensure safe, secure service delivery.
All third parties are bound by confidentiality and data protection agreements.
5. Data Retention
Your medical records are retained for the period required by law and professional guidance. Non-medical information will be kept only as long as necessary to provide our services or meet legal obligations.
6. How We Protect Your Information
We use a combination of physical, digital, and procedural safeguards to protect your personal data, including:
- Encrypted systems and secure servers.
- Access controls to restrict who can see your information.
- Regular staff training on confidentiality and data protection.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the information we hold about you.
- Request corrections to inaccurate or incomplete data.
- Request deletion of your data where applicable.
- Withdraw consent (where processing is based on consent).
- Request restriction or objection to certain types of processing.
- Request transfer of your data to another provider (data portability).
To exercise these rights, please contact us using the details below.
8. Cookies and Website Use
Our website may use cookies to improve your browsing experience and analyse website traffic. You can control cookie settings through your browser preferences.
9. Updates to This Policy
We may update this policy from time to time to reflect changes in our services or legal requirements. Updates will be published on our website.
10. Contact Us
If you have questions about this policy or your data, please contact:
Vittarra Clinic
Unit 20, Langham Barns, Colchester Essex CO4 5ZS
admin@vittarraclinic.uk
01206 692835
If you are not satisfied with our response, you have the right to raise your concerns with the Information Commissioner’s Office (ICO): www.ico.org.uk